ON FAMILIES OF n-CONGRUENT ELLIPTIC CURVES 



T.A. FISHER 

Abstract. We use an invariant-theoretic method to compute certain twists of 
the modular curves X{n) for n — 7, 9, 11. Searching for rational points on these 
twists enables us to find non-trivial pairs of n-congruent elliptic curves over 
Q, i.e. pairs of non-isogenous elliptic curves over Q whose n-torsion subgroups 
are isomorphic as Galois modules. We also show by giving explicit non-trivial 
examples over Q{T) that there are infinitely many examples over Q in the cases 
n = 9 and n = 11. 



1. Introduction 

Elliptic curves Ei and E2 over a field K are n- congruent if their n-torsion 
subgroups Ei[n\ and sue isomorphic as Galois modules. They are directly 

n-congruent if the isomorphism : Ei[rL\ = E2[n] respects the Weil pairing and 
reverse n-congruent if en{(pP, (pQ) = en{P,Q)~^ for all P,Q E Ei[n]. The elliptic 
curves directly n-congruent to a given elliptic curve E are parametrised by the 
modular curve Ye^u) = XE{n) \ {cusps}. 

For n < 5 we have XE{n) = and the corresponding families of elliptic curves 
were computed by Rubin and Silverberg |RSlj . |RS2j . [S]. However for n > 7 the 
genus is greater than 1. This prompted Mazur [M] to ask whether there are any 
pairs of non-isogenous elliptic curves over Q that are directly n-congruent for any 
n > 7. This was answered by Kraus and Oesterle [KOj who gave the example 
of the directly 7-congruent elliptic curves 152al and 7448el. The labels here are 
those in Cremona's tables [C]. Nowadays it is easy to find further examples by 
searching in Cremona's tables, for example 

n = 11 19061 + 2470al, 
n = 13 52a2 + 98861, 

n = 17 367561 - 4777561. 

In each case the n-congruence is proved by computing sufficiently many traces 
of Frobenius; see |KOl Proposition 4]. Then |KOt Proposition 2] shows that the 
congruences are direct or reverse as indicated by the ±. 

Motivated by Mazur's question, Kani and Schanz |KSj studied the geometry 
of the surfaces that parametrise pairs of ra-congruent of elliptic curves. This 
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prompted them to conjecture that for any n < 12 there are infinitely many pairs 
of n-congruent non-isogenous elhptic curves over Q. It is understood that we 
are looking for examples with distinct j-invariants, since otherwise from any sin- 
gle example we could construct infinitely many by taking quadratic twists. The 
conjecture was proved in the case n = 7 by Halberstadt and Kraus [HKlj . who 
subsequently |HK2j gave an explicit formula for Xe{7) and used it to show that 
there are infinitely many 6-tuples of directly 7-congruent non-isogenous elliptic 
curves over Q. We find the corresponding formulae for Xe{9) and Xe{H) and 
use them to construct explicit infinite families of pairs of elliptic curves that prove 
the conjecture for n = 9 and n = 11. In contrast the proof of the conjecture for 
n = 11 in |KRj does not yield a single explicit example. 

We briefiy mention three further motivations for studying ra-congruence of el- 
liptic curves. 

• The modular approach to solving Diophantine equations sometimes re- 
quires us to find all elliptic curves n-congruent to a given elliptic curve. 
For example the paper of Poonen, Schaefer and StoU |PSS] makes essential 
use of the formula for Xe{7) due to Halberstadt and Kraus. 

• There is a correspondence between pairs of reverse n-congruent elliptic 
curves and curves of genus 2 that admit a degree n morphism to an elliptic 
curve. See for example [F?] . 

• It was observed by Cremona and Mazur |CMj that if elliptic curves E and 
F are n-congruent then the Mordell-Weil group of F can sometimes be 
used to explain elements of the Tate-Shafarevich group of E. 

As each of these motivations makes clear, we should also be interested in congru- 
ences that do not respect the Weil pairing. The elliptic curves reverse n-congruent 
to E are parametrised by the modular curve Y£{n) = X^{n) \ {cusps}. The fam- 
ilies of elliptic curves parametrised by ^^(3) and Y^[4) were computed in |F2] . 
and the case of ^^(5) will be treated in |F3j . An equation for X^(7) was given in 
|PSSt Section 7.2]. We find corresponding formulae for X^{9) and Xg(ll). In the 
cases n = 7 and n = 9 we use these formulae to construct explicit infinite families 
of pairs of reverse n-congruent non-isogenous elliptic curves over Q. We do not 
know if any such families exist in the case n = 11. 

In Section [TTT] we recall the definitions of X{n) and its twists. We then state the 
formulae for ^^(n) and X^{n) for n = 3, 7, 9, 11 in Section 11.21 We include the 
cases n = 3 and n = 7 since our methods are quite different from those in |F2j and 
|HK2j . The results in the case n = 3 are also needed in Section [H] to treat the case 
n = 9. In the next two subsections we explain our basic strategy for computing 
twists and illustrate how it works in the case n = 3. 

In Section [2] we recall Klein's equations for X{n) for n > 5 an odd integer. The 
original approach of Klein was via theta functions, but our treatment is purely 
algebraic. We also recall explicit formulae for the action of SL2(Z/nZ) on X{n). 
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Then in Section [3] we use invariant theory for SL2(Z/nZ) to compute the twists 
XE{n) and X'^{n) for n = 7, 9, 11. 

In Section H] we show that in the special case of an eUiptic curve E whose 
n-torsion contains a copy of the Galois module there are particularly sim- 
ple formulae for X£;(n) and X~^{n). This section may be read independently of 
Section [31 Again the result for Xs(7) is already given in |HK2] . 

Our formulae reduce the problem of finding elliptic curves n-congruent to E to 
that of finding rational points on Xe(?7,) and X^{n). However before searching 
for rational points it helps to simplify the equations by making a change of co- 
ordinates. In Section O we describe how to do this in the case ii' = Q. The 
problem naturally splits into two parts called minimisation and reduction. 

In Section [6] we give formulae for the families of elliptic curves parametrised by 
YE{n) and Y^{n) for n = 7, 9, 11. This is easiest in the case n = 9 since the natural 
maps Xe{^) — )■ XE^'i) and X^{9) — )■ X^(3) have a simple geometric description. 
In the cases n = 7 and n = 11 it is easy to compute the maps j : XE^n) — > 
and j : X^{n) — > P^. However determination of the right quadratic twists takes 
considerably more work. (In specific numerical examples one can always fall back 
on the method in |KOj . |HKlj .) In the case of Ye{7) a formula is given in |HK2j . 
although this formula does not quite cover all cases. We give a new proof leading 
to formulae that work in all cases. We then generalise to the families of elliptic 
curves parametrised by Y^{7), Ye(11) and y^(ll). 

Finally in Section [7] we give examples of two different sorts. First we have written 
a program in Magma |BCPj that given an elliptic curve E/Q and n G {7,9, 11} 
searches for rational points (up to a specified height bound) on minimised and 
reduced models for XE{n) and X^{n) and returns the corresponding list of elliptic 
curves n-congruent to E. For n = 9 and n = 11 we have run this program on 
every elliptic curve in the Cremona database. In particular we found three triples 
of directly 9-congruent non-isogenous elliptic curves over Q. 

Secondly we have found some non-trivial pairs of ra-congruent elliptic curves 
over Q(T) for n = 7, 9, 11. The infinite families mentioned above are obtained by 
specialising T. 

All computer calculations in support of this work were preformed using Magma 
|BCPj . A Magma file checking all our formulae, together with extended versions 
of the tables in Section [TJ is available from the author's website |F4j . 

1.1. Some modular curves. We work over a field K of characteristic and 
write K for the algebraic closure. Let n > 3 be an integer, and M a Galois 
module isomorphic to (Z/nZ)^ as an abelian group and equipped with a non- 
degenerate alternating Galois equivariant pairing M x M — )■ We temporarily 
write Ym for the algebraic curve defined over K whose L-rational points {L a field 
extension of K) parametrise the isomorphism classes of pairs {E,(f)), where E is 
an elliptic curve defined over L and (p : E[n] = M is a symplectic isomorphism 
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(i.e. one that matches up the given pairing on M with the Weil pairing on E[n\) 
commuting with the action of Gal(L/L). Two such pairs 0i) and (£^2, ^2) are 
isomorphic if there is an L-isomorphism a : Ei ^ E2 such that 0i = 02 o (a|£;i[n])- 
Let Xm be the smooth projective model of Ym- We define X{n) to be Xm in 
the case M = Z/nZ with pairing 

((c,a),(e,&)) = c'r^ 

Given an elliptic curve E over K we define XE{n) to be Xm in the case M is 
E[n\ equipped with the Weil pairing. More generally we may take M to be E[n] 
equipped with the rth power of the Weil pairing for any r G (Z/nZ)^. However 
the curve obtained only depends on the class of r mod squares. Since we will later 
be specialising to n G {3, 7, 9, 11} it suffices to take r = ±1. Taking r = 1 gives 
the curve XEiji) defined above. Taking r = — 1 gives the curve X^{n). 

We identify SL2(Z/nZ) with the group of symplectic automorphisms of /i„ x 
TLjnL. There is then a natural action of PSL2(Z/nZ) := SL2(Z/nZ)/{±J2} on 
X[n) with quotient map j : X{n) — )■ P^. From the analytic theory we know that 
the j-map is ramified above 0, 1728 and 00 with ramification indexes 3, 2 and n. 
Hence by the Riemann-Hurwitz formula the genus of X{n) is 

(7H = — — #PSL2(Z/nZ) + l 
\ln 

where for n > 3 we have 7^PSL2(Z/riZ) = (v? j1) W^^J^ — 1/p^)- For some small 
values of n the genus is as follows. 



n 


2 


3 


4 


5 


6 


7 8 


9 


10 


11 


12 


13 


14 


15 


16 


17 


9{n) 














1 


3 5 


10 


13 


26 


25 


50 


49 


73 


81 


133 



1.2. Statement of results. The family of elliptic curves parametrised by Ye(^) 
for n = 2,3,4,5 is given by formulae of Rubin and Silverberg |RS1] . |RS2] . [S]. 
In [F2j we developed an alternative invariant-theoretic approach that also gives 
formulae for Yj^{n). In the case n = 3 we have 

Theorem 1.1. Let E be an elliptic curve with Weierstrass equation = — 
27C4X — 54c6 . Then the families of elliptic curves parametrised by Ye{3) and Yj^ (3) 
are 

y'^ = — 27c4(A, fi)x — 54c6(A, /i) 

and 

y'^ = x^ - 27cl{X, ^)x - 54c6(A, /x) 
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where 

C4(A, jj) = c^X^ + AceX^jj + QclX^^^ + Ac^Cf^X^i^ - (3c^ - 4cg)/i'', 
C6(A, /i) = cqX^ + 6c^AV + 15c4C6AV^ + 20c^AV^ 

+ ISc^cgAV' + 6(3c^ - 2c4c2)A/i^ + (9c^C6 - 8c^)/i^ 

c:(A,/i) = -4(A^ - 6C4AV - ScgA/i^ - ?>cl^*)/{cl - cl), 
c*(A,/i) = -8c6(A,/i)/(cl-c2)2. 

Proof: These formulae (and their relation to those in |RSlj ) may be found in |F2j . 
We recall the idea of the proof. Let F be the ternary cubic obtained by homogenis- 
ing the Weierstrass equation for E. Then the family of curves parametrised by 
Xe(3) is the pencil of plane cubics spanned by F and its Hessian, each with base 
point the same as that for E. It only remains to put these curves in Weierstrass 
form. One way of carrying out this final calculation is by using the formula for the 
Jacobian (due to Weil) coming from classical invariant theory. For this reason the 
polynomials C4(A, /i) and C6(A, /i) may already be found in [Sal Art. 230], although 
not with the interpretation given here. 

The corresponding formula for ^^(3) is obtained by replacing the Hessian 
(which is a covariant) by suitable contravariants. □ 

A formula for X£;(7) was obtained by Halberstadt and Kraus |HK2j . Their 
method relies on studying the points on the Klein quartic 

X(7) = [x^y + y^z + z^x = 0} C 

corresponding to an elliptic curve E and the elliptic curves Ea-, Eh, E^. that are 
2-isogenous to E. By combining this result with some classical invariant theory 
Poonen, Schaefer and StoU |PSSt Section 7.2] then gave a formula for X^{7). 

Theorem 1.2 (Halberstadt, Kraus, Poonen, Schaefer, Stoll). Let E be an elliptic 
curve with Weierstrass equation y"^ = x^ + ax + b. Then Xe{7) C has equation 
J-" = where 

T = ax^ + 7bx^z + 3x^?/^ — 3a^x^z^ — Qbxyz^ 

- babxz^ + 2y^z + ?,ay^z^ + 2a^yz^ - Ab'^z^, 
and Xj^{7) C P^ has equation Q = where 

g = -c?x^ + 2abx^y - Ubx^z - (6a^ + 366^)a;^?/^ + Qax^z^ 
+ 2a%xy^ - Uabxy'^z + mxyz^ + (3a^ + 19a6^)?/^ 
- (8a^ + A2b^)y^z + Qa^y'^z^ - 8ayz^ + 3z\ 
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We give new proofs of Theorems 11.11 and 11.21 We then extend to the cases n = 9 
and n = 11. Although we beheve that the formulae in Theorems II . 31 and 11.41 below 
are correct for all elliptic curves E we assume for simplicity that j{E) ^ 0, 1728. In 
Section [2] we recall that X{9) may be embedded in P'^ as the complete intersection 
of two cubics: 



Theorem 1.3. Let E he an elliptic curve with Weierstrass equation y'^ = + 
ax + h. If j{E) ^ 0, 1728 then Xe{9) C has equations = = where 

= x^t + 6xyz + Qhxf + Qy^ - 9ay'^t + Qa^yt^ - 3bz^ + Sa'^zH 
+ 9abzt^ - (a^ - 126^)^3, 
J-2 = x'^z + Qxy"^ — Qaxyt + 2a^xt^ — 9ay'^z — ISbyz'^ + 12a^yzt + a^z^ 
+ 9ahz^t - "ia^zt^ + a%t^ , 

and X~^{9) C P^ has equations Qi = Q2 = ^ where 

Qi = 9x^y + ^x^z — Gaxyt + Qhxt^ — 6ay^ + 27by'^t + Sayz'^ 
+ ISbyzt + Sa'^yt'^ + az^ + Sbz'^t + a^zt^ - abt^, 

Q2 = + Gaxyz + ISbxyt + Saxz"^ + 6bxzt + a^xt^ + 9by^ + Qa^yH 
- 9byz^ + Qa^yzt - Sabyt'^ - Abz^ + 2ahH + 2bH\ 

It was observed by Klein that X{11) may be embedded in P^ as the singular 
locus of the Hessian of the cubic threefold 



Theorem 1.4. Let E be an elliptic curve with Weierstrass equation y'^ = x^ + 
ax + b. If j{E) 7^ 0, 1728 then Xe{11) C P^ is the singular locus of the Hessian of 




{v'^w + w'^x + x^y + y'^z + z^v = 0} C P^. 



J- = V + av z — 2avx + Aavxy — Qbvxz + avy + Qbvyz + a vz — w 
+ aw^z — Aawx^ — 12bwxz + a^wz^ — 2bx^ + Sbx^y + 2a^x^z + 6bxy^ 
+ Aabxz^ + by^ - a'^y'^z + abyz^ + 26^ z^, 



and X^(ll) C P"^ is the singular locus of the Hessian of 

Q = v'^z + 2vwy + Avxy + 2w'^x — aw'^z + 2wx'^ — 2awy'^ — Gbwyz 



+ 6x^ - Gax'^z + 2a^xz^ + by'^ - 2a^y'^z - 5abyz'^ - b'^z^. 
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1.3. Preliminaries on twisting. We identify SL2(Z/nZ) with the group of sym- 
plectic automorphisms of yU„ x Z/nZ via ( " rf) • (Cn' v) ^ (Cn^"*"*^! ex + dy), where 
(n is a fixed primitive nth root of unity. The Galois action on SL2(Z,/nZ) will 
be that arising from this identification. There is then a Galois equivariant group 
homomorphism 

(1) p : SL2(Z/nZ) ^ Aut(X(n)). 
where the action of 77(7) on Y{n) is given by {E, (p) i— )■ [E, 7 o 

Lemma 1.5. Let E/K be an elliptic curve and(j) : E[n] = /i^xZ/nZ a symplectic, 
respectively anti- symplectic, isomorphism over K . Then there is an isomorphism 
a : XE{n) — ?■ X{n), respectively a : X^(n) — )■ X{n), over K such that 

a{Q)a^^ = p{a{(p)(p~^) 

for allae GdA(K/K). 

Proof: The points on YE{n), respectively Y^{n), correspond to pairs {F,ijj) 
where F is an elliptic curve and ip : F[n] = E[n\ is a symplectic, respectively 
anti-symplectic, isomorphism. The modular interpretation of a is that it sends 

{F,ij) to {F,(f)o'ilj). □ 

We are interested in the case X{n) is embedded in p™^i for some m, and p is 
realised as a projective representation (also denoted p by abuse of notation): 

p : SL2(Z/nZ) ^ PGL„(Z). 

Writing oc for equality in PGLm{K), we further suppose there exist^e: G GLm{K) 
such that 

(2) pi^L) oc epi^r^e-' 

for all 7 G SL2(Z/nZ), where l = (0 -i)- Our strategy for computing XE^n) and 
X^{n) as twists of X{n) is explained by the following lemma. 

Lemma 1.6. Let E / K be an elliptic curve and (p : E[n] = pn>^ Z/nZ a symplectic 
isomorphism over K. Suppose hi, /12 G GLm{K) satisfy 

a{hi)h^^ oc p{a{(f))(f)^^) a{h2)h^^ oc p{(^i<P)<P~^)~^ 

for all a G Gal(K/K). Then Xsin) C P™"^ and X^{n) C P*"'"^ are the twists of 
X{n) C P™-^ given by XE{n) = X{n); x /iix and Xj^{n) = X{n); x ^ £/i2X. 

Proof: We apply Lemma [T75] to the pairs {E, cp) and (ii^, io (p). □ 



By Remark l2.4f iii) below we can usually take e — I, 
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Remark 1.7. If the projective representation p lifts to a representation 

p : SL2(Z/nZ) ^ GL,n(K) 

then the existence of the matrix hi in Lemma 11.61 is clear from the generalised 
form of Hubert's Theorem 90 which states that H\Gal(K / K) , GUn(K)) = 0. 
We could then take /i2 = h^^. We will instead use invariant theory for the group 
SL2(Z/'riZ) to give explicit formulae for hi and /i2- 

1.4. Introductory example: the case n = 3. The family of curves parametrised 
by X{3) = is the Hesse pencil of plane cubics 

{A{x^ + y^ + z^) + Bxyz = 0} C 

with base point {x : y : z) = : 1 : —1) . An equation for this family in Weierstrass 
form is y"^ = x^ — 27c4{A, B)x — 5Ace{A, B) with discriminant A = (c| — Cg)/1728 = 
where 

D{A,B) = -27A^-AB^ 

C4{A,B) = -21QA^B + B'^ 

ceiA, B) = 5832A^ - 540^^5^ - B^. 

The action of SL2(Z/3Z) on X(3) = P^ lifts to a representation 

p : SL2(Z/3Z) ^ SL2(Z) 

given on the generators S = ( i*! o ) T 



Cs-C: 
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The hypothesis ([2]) is satisfied with e 



10' 
, 18 , 



Lemma 1.8. Let E/K he an elliptic curve and : i?[3] = p^x Z/3Z a symplectic 
isomorphism over K . Let {A : B) he the corresponding K-point on X{3) = P^ 
with co-ordinates {A, B) scaled so that 

(3) c^iA.B) = Ci{E) and Cq{A, B) = cq{E) 

where E has Weierstrass equationy"^ = x^ — 27c4{E)x — 5Acq{E). Ifj{E) ^ 0, 1728 
then 



hi = 

satisfies the hypotheses of Lemma \1.(A 



^ dB 
R dD 
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Proof: Since {A : B) & -^(3) is not a cusp we have dethi = AD ^ and so 
hi G GL2{K). Let G = Im(p). There is a unique character x : G — )■ /za such that 

Dog = xi9)D 

(4) C4og = xigfci 

ce0 9 = xigfce 
for all g E G. It follows by the chain rule that 



(5) ]-9 = xi9)9 





for all g E G. 

Let ^o- = cr(0)0^"'^ £ SL2(Z/3Z). Since p describes the action of SL2(Z/3Z) on 
X(3) ^ we have 



(6) ^ L = ^<xp(e<x 





for some G i^^. Then by ([1]) we have 

a(c4(A, B)) = KxlcM, B) and a{c^{A, B)) = XlxlcM, B) 

where Xa = x(p('Co-))- Since Ci{E),CQ{E) E K it follows by (jS]) and our assumption 
j{E) ^ 0, 1728 that Xlxa = 1- Using (ED and (E]) we compute 

a{hi) = hio (A^p(^^)) = p{^a)hi I ^ ) oc p{^a)hi. 

Hence a{hi)h^^ oc p(^(t) as required. □ 

Lemma [L6] shows that X£;(3) and X^(3) are the twists of X{3) = by hi and 
e/i^"^. To compute the famihes of curves parametrised by Xe{S) and X^{3) we 
put 

C4(A, p) = ciXA - pff , AS + p|f ), 
C6(A,p) = C6(AA-p|§,AS + p|f), 

and 

cKA, p) = p^C4(Ai? + p|f , -18(AA - p§)), 

C6(A, = p^C6(Ai? + pf , -18(AA - p§)). 

The coefficients of C4(A,p), C6(A,p), C4(A,p), Cg(A,p) may be written as rational 
functions in C4^{A,B) and Cq{A,B), thereby giving the formulae in Theorem 11.11 
The following alternative proof of Theorem 1 1.1 1 has the advantage over that in [F2] 
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of not requiring any knowledge of the Hessian or the contravariants. We include 
it to illustrate the approach we take for n = 7, 9, 11. 

Proof of Theorem II .11 We assume j{E) ^ 0, 1728 so that Lemma fLSl applies. 
By |RS1[ Proposition 2.1] the formulae in the statement of the theorem define a 
family of elliptic curves with constant mod 3 Galois representation. In the case of 
Ye(3) the proof is completed by specialising to (A : /i) = (1 : 0). In general, that 
is, to give an argument that also applies to Y^(3), we note that since we have 
specified a family of elliptic curves with the right j-invariant, it must be correct up 
to quadratic twist, say by 5 G . It remains to show that 5 is a square. As noted 
in |HK2^ Section 7.1] it suffices to prove this in the case : E[3] = /i3 x Z/3Z 
is defined over K. But in that case the families of curves parametrised by X{3), 
Xe{3) and -^^^(3) are the same, and this is born out by our construction. □ 



2. Equations for X(n) 



We recall equations of Klein |Klj . |K2j . |K3j for the modular curves X{n). Our 
treatment follows the survey in |FOt Chapter 4], but see also |AR] . |V2] . 

2.1. Klein's equations. Let E be an elliptic curve and P,Q a basis for E[n] 
with en{P,Q) = Cn- If we embed E C P"~^ by a complete linear system \D\ of 
degree n then the translation maps Tp and tq extend to automorphisms of P"~^. 
The following lemma is recalled from |F1] . 



Lemma 2.1. (i) We may change co-ordinates on P" ^ (over K) so that Tp and 
Tq are given by 

\ /o ■■■ l\ 



1 

Cn 





\0 

(a) Ifn is odd and [- 

K ) such that Tp, tq and multiplication by 

/l .. 



■ 
■ 

■ 








and Mr 



1 
1 










CnJ \0 ■■■ 1 OJ 

D then there is a unique choice of co-ordinates (over 
1 are given by Mp, Mq and 

o\ 



-1] 








1 

1 
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We restrict to n > 5 an odd integer. Given a symplectic isomorphism : 
E[n] = /i„ X Z/nZ we let P, Q be the basis for E[n] with (p{iP + jQ) = (C, j) for 
all i,j G Z/nZ. If we embed E C P""^ via the complete linear system |n.0£;| and 
choose co-ordinates as in Lemma [2?T] then sending {E, 0) to the image of 0^; defines 
an embedding Y{n) C P"~^. Indeed if we know the co-ordinates of 0^; G P"~^ 
then Mp and Mq allow us to write down points on E. Since E is defined by 
quadrics, it follows by Bezout's theorem that these points suffice to determine 
E. The embedding Y{n) C P""^ is defined over K since {Mp,Mq) C PGL„(Z) 
is isomorphic to /i„ x Z/nZ Galois module. 

We write (xq : Xi : . . . : for our co-ordinates on P"~i and agree to read all 

subscripts mod n. Since n is odd we have 

u.Oe ~ Oij + P + 2P + . . . + (n - 1)P. 

Therefore 0^; belongs to exactly one of the hyperplanes fixed by Mp. But 0^; is 
fixed by [—1] so we have either 

= (0 : ai : 02 : . . . : 02 : ai) (+) 
or = (0 : Oi : 02 : . . . : — 02 : — Oi) (— ) 

where oi, 02, . . . are non-zero. 

Let W be the vector space of quadrics on P"^i and V the subspace of quadrics 
vanishing on E. Then dimW^ = n{n + l)/2 and dim\^ = n{n — 3)/2. The action 
of Mp allows us to write these as direct sums V = Q)Vi and W = Q)Wi with 

ViGWi = {Xi,Xi-iXi+i, ...). 

Since n is odd it follows by the action of Mq that dim Vi = (n — 3)/2 and dim Wi = 
{n + l)/2. The requirement that the quadrics in Vq vanish at 0^; and its translates 
under Mq imposes some linear conditions on the coefficients of these quadrics. 
This leads us to rule out the case (+) and to make the following definition. 

Definition 2.2. For n > 5 an odd integer let Z{n) C P"-^^ be the subvariety 
defined by oq = 0, o„_j = — Oj and 

(7) rank(oi_jO,+j)^jio < 2. 

We note that ([7]) is equivalent to the vanishing of the 4x4 Pfaffians of this 
skew-symmetric matrix. The above construction shows that Y{n) C Z{n). It is 
natural to ask whether Z{n) = X{n). Velu |V2j proved this in the case n = p is 
a prime. However when n is composite Z{n) has extra components. 
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When n = 7 we put 0^ = (0 : a 


: b : —c : c : 


-6 : - 




/o 


-a' -b^ 


-cA 






ac 


-be 


rank 












—ac 


ab 






6c —ab 


/ 



< 2. 



Thus X(7) = Z(7) is the Klein quartic {a^b + b^c + c^a = 0} C P^. 



When n 
defined by 



put 0^ 


= (0 


: a : 


-6 : 


: c : 


— c : — 




/o 


-a^ 


-6^ 




-c'\ 




a^ 





—ad 


6c 


cd 


rank 


62 


ac? 





ac 


-bd 






—be 


— ac 





—ab 




w 


—cd 


6ci 


a6 


/ 



d : b : —a). Then Z{9) is 



< 2, 



equivalently 



(a26 + 62c + c^a)^ = 
a6^ - ac^ -bd^ = 



bc^ - ba^ - cd^ 
ca^ - cb^ - ad^ 




0. 



Adding together the last three equations and factoring shows that Z{9) is the 
union of the curve 

a'^b + b'^c + c^a = 
a62 + 6c2 + ca^ = d^ 



X(9) 



C 



and four isolated points 

(0 : : : 1), (1 : 1 : 1 : 0), (1 : Cs : Cl : 0), (1 : C| : Ca : 0). 

When n = 11 we put Oe = {0 : a : —c : b : e : d : —d : — e : — 6 : c : —a). Then 
X(ll) C P^ is the singular locus of the Hessian of the cubic threefold 

{a% + b'^c + c^d + d^e + e^a = 0} C P^ 

We refer to |ARj for further details. We checked using Magma that the homoge- 
neous ideal of X(ll) is generated by the 4x4 minors of the Hessian matrix of the 
cubic form. 

2.2. The action of SL2(Z/r2Z). We continue to take n>h odd. In Section [2?T] 
we defined an embedding X{n) C P"*"^ where m = {n — l)/2. The action of 
SL2(Z/nZ) on X{n) extends to a projective representation p : SL2(Z/nZ) — )■ 
PGLm{K). We show that it lifts to a representation. See [ARt Appendix I] for a 
discussion of how this relates to work of Weil. 
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Proposition 2.3. The projective representation p : SL2(Z/nZ) PGLm{K) lifts 
to a representation p : SL2(Z/nZ) — )• GLm{K). 

Proof: The action of 7 = ( " ^) G SL2(Z/r7,Z) on Y{n) is given by 

(8) -f: {E,P,Q)^ {E,dP-cQ,-bP + aQ). 

If we embed X{n) C P"^^ as described in Section [271] then the action ([8]) extends 
to a projective representation W : SL2(Z/'riZ) — )■ PGL„(i^) where the image of 
7 = ( " ^ ) is uniquely determined by the properties that 

(9) 7f(7)-^M]^M^7f(7) oc M^"-^^Mq""+'^'' 

for all u, f G Z/nZ, and 7f(7) commutes with [—1]. We regard vf as describing 
an action on P"^i = P(14^) where W is an n-dimensional vector space. The 
action of [—1] gives an eigenspace decomposition W = Wj^ © W- with dimPV± = 
[n ± l)/2. We may then identify p with the restriction of vf to P(iy_) = P"^"^. 
To prove the proposition we show more generally that 7f lifts to a representation 
TT : SL2(Z/nZ) ^ GL„,(Z). 

Let S = (i'lo) and T = (01) be the usual generators of SL2(Z/'n,Z). In 
view of the relations (ST)^ = S'^ = = I2, the only 1-dimensional charac- 
ters of SL2(Z/nZ) are the ones in the case n is a multiple of 3 that factor via 
PSL2(Z/3Z) ^ A4. Using dH} and © we compute 

(10) W{S) (X (C)i;-io vf(T) (X Diag(Cf /^)r=o' 

where the exponents are read as elements of Z/nZ. 

If M G GLn{K) acts on W± then we write M± for its restriction to W±. Since 

3(1^ + 2^ + ... +m2) = (modn) 

it is clear by f lTOj) that there is a lift 7r(T) of 7f(T) and 1-dimensional characters 
X± of SL2(Z/?7.Z) such that det(7r(T)-|-) = x±iT). Next we lift Tf{S) to a matrix 
7r(S') such that 

(11) 7l{S)7l{T)-\{S) = 7i{T)7t{S)7t{T). 

Restricting to W± and taking determinants it follows that det(7r(S')±) = 1 = 
X±{S). For each 7 G SL2(Z/nZ) we now let 7r(7) be the unique lift of ¥(7) such 
that det(7r(7)-|-) = x±(7)- These lifts exist since S and T generate SL2(Z/?7,Z) and 
are unique since dim and dim are coprime. It is evident that the map vr 
so defined is a group homomorphism. □ 

Remark 2.4. (i) A calculation using (dl]) shows that n{S) = g^^C^jlo where 
the Gauss sum gn = J2i=o C~*^^^ satisfies gl = (— l)*^"~^)/^n. 
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-ai) then with respect to co-ordinates 



p(T) = Diag(C 



j2vm 



=1- 



(ii) If we take 0^; = (0 : ai : 02 : . . . : —02 
(ai : . . . : a™.) we may take 

In particular p^-h) = 

(iii) Since p{S) and p(T) are symmetric we see that ([2]) holds with e = Im- 

(iv) If 3 f n then SL2(Z/nZ) has no 1-dimensional characters and so the lifts we 
have constructed are unique. If 3 | n then 3 f m and we can make p unique by 
demanding that det p(T) = 1, equivalently p takes values in SLm{K). 



3. Equations for XE{n) and X^{n) 

We derive our equations for XE{n) and X^{n) by using invariant theory for the 
group SL2(Z/nZ) to twist the equations for X{n) in Section [2?n We split into the 
cases n = 7, 9, 11. 

3.1. Formulae in the case n = 7. We recall that X{7) is the Klein quartic 
{F = 0} C P2 where F = a% + b^c + c^a. Let G = PSL2(Z/7Z) be the image of 
p : SL2(Z/7Z) -> GUiK). It is generated by 



1 

97 

















(Cr 





o\ 




-CI 






Ct 




and 










\C7 














Vo 





CrV 



where g-j 



Definition 3.1. An invariant of degree m is a homogeneous polynomial / 
J(a, b, c) of degree m such that I o g = I for all g & G. 

Recalling formulae of Klein we put 



H = (-1/54) X 





d^F 


d^F 


da? 


dadb 


dadc 


d^F 


a'^F 


d^F 


dadb 




dbdc 


d^F 


a'^F 


d^F 


dadc 


dbdc 


dc^ 



C4 



;i/9) X 



92 F 


d^F 
dadb 


92 F 
dadc 


dH 
da 


d'^F 
dadb 


d^F 


92 F 
dbdc 


dH 
db 


dadc 


32 F 
dbdc 


92 F 
9c2 


dH 

dc 


dH 
da 


dH 
db 


dH 
dc 






C6 = (1/14) X 





dF 


dF 


da 


db 


dc 


dH 


dH 


dH 


da 


db 


dc 


dc4 


dc4 


dc4 


da 


db 


dc 
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The ring of invariants K[a, b, c]'^ is generated by F, H, C4 and cq subject to a single 
relation which reduces when we set F = to 



Since F, H, C4 and Cq have degrees 4, 6, 14 and 21 it is clear that every invariant of 
odd degree is divisible by Cg. 

Lemma 3.2. The j -invariant X{7) is given by j = c\/H'^ . 

Proof: Both j and Jq = cl/ H'^ define maps X{7) -> that quotient out by the 
action of G = PSL2(Z/7Z). So they can differ by at most a Mobius map. We 
recall that j is ramified above 0, 1728 and 00 with ramification indices 3, 2 and 7. 
Since 



Definition 3.3. A covariant column, respectively contravariant column, of degree 
m is a column vector v = (f 1, V2, f 3)"^ of homogeneous polynomials of degree m in 
variables a, b, c such that v o g = gv. respectively y o g = g^'^v, for all g & G. 

Wc note that x = (a, b, c)'^ is a covariant column of degree 1, whereas if / is an 
invariant of degree m then V/ = (|^, |^)"^ is a contravariant column of degree 
m — 1. 

Lemma 3.4. Let E / K be an elliptic curve and (j) : E\l\ = fijX Z/7Z a symplectic 
isomorphism over K . Let {a : b : c) be the corresponding K-point on X(J) C P^ 
with co-ordinates (a, 6, c) scaled so that 

(12) C4(a, 6, c) = C4(-E) and CQ{a,b,c) = cq{E) 

where E has Weierstrass equationy"^ = ^27 C4{E)x — 54cq{E) . If j{E) ^ 0, 1728 
and h G GL3(A') is a matrix whose columns are covariant columns, respectively 
contravariant columns, of the same degree mod 7 evaluated at (a, 6, c) then 



cl- cl = l72%H^ (modF). 



#{F = C4 = 0}<4deg(c4) = ||G| 
#{F = C6 = 0}<4deg(c6) = 116-1 
#{F = H = Q] <Adeg{H) = 



and jo — 1728 = c\/H'^ it follows that j — jo as required. 



□ 



respectively 



-T 



for allae Gal{K/K). 
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Proof: Let C,^ = cr{(p)(p ^ G SL2(Z/7Z). Recalling that p describes the action of 
SL2(Z/7Z) on X{7) C we have 

(13) a{{a,b,cf) = Kpi^^)ia,b,cf 

for some Ao- G . Since C4 and cq are invariants of degrees 14 and 21 we deduce 

cr(c4(a, 6, c)) = A^'^C4(a, b, c) and (j(c6(a, 6, c)) = A^"'^C6(a, 6, c) 

for all a G Gal(-ft'/-ft'). Since c^iE), Cq{E) G K it follows by (1T2|) and our assump- 
tion j{E) ^ 0, 1728 that A^^ = Xf = 1. Hence A^ is a 7th root of unity. Now 
suppose the columns of h are obtain by specialising polynomials whose degrees 
are all congruent to r mod 7. Then by (fT3|) and Definition 13.31 we have 

a{h) = ho{X^p{^^)) = Xlp{^,)h, 

respectively 

a{h) = ho{X,p{^^)) = X:p{^,)-^h. 
Hence a{h)h^^ oc p{^a), respectively a{h)h~^ oc p{^a)~^, as required. □ 

We use Lemmas 11.61 and [3l^ to compute equations for Xe{7) and X^(7). First 
we classify the covariant and contravariant columns. It is evident that 

• The dot product of a covariant column and a contravariant column is an 
invariant. 

• The cross product of two covariant columns is a contravariant column. 

• The cross product of two contravariant columns is a covariant column. 

We also write [vi, V2, V3] = (vi x V2) ■ V3 for the scalar triple product. It is easy 
to solve for the covariant and contravariant columns of any given degree by linear 
algebra. Let e and f be the covariant columns of degrees 9 and 11 given by 

_ 722 (V-F X VH) - CijVF X VC4) + UH^jVH x VC4) 
J _ /24(VF X VH) - (16F4 - 104FF2)(VF x VC4) + C4{VH x VC4) 

where 

/22 = USF'^H - 48^^04 - 2048FF^ 

I24 = 128F^ - WOF^H^ - 236FHC4 - 336i?^. 

Lemma 3.5. (i) The covariant columns of odd degree, respectively even de- 
gree, form a free k[F,H^Ci\- module of rank 3 generated by x, e, f, respec- 
tively VF X VH, VF X Vc4, VH x VC4. 
(ii) The contravariant columns of odd degree, respectively even degree, form a 
free k[F, H,C/^]-module of rank 3 generated by VF, VH, VC4, respectively 
X X e, X X f, e X f . 
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Proof: By direct calculation we have [x, e, f] = — ce, whereas the definition of cq 
may be rewritten as [VF, V-ff, VC4] = 14c6. 

Let V be a covariant column of odd degree. We write v = /ix + + I^f where 
/i, /2, 13 are rational functions in a, b, c. Taking the dot product with e x f shows 
that [v, e, f] = /i[x, e, f]. But [v, e, f] is an invariant of odd degree and therefore 
divisible by Cg. It follows that /i is an invariant and likewise for I2 and I^- 

The other cases are similar. □ 



Theorem 3.6. Let E/K he an elliptic curve with Weierstrass equation y"^ = 

- 27c4X - 54c6 and let A - (c| - c^)/1728. // j{E) ^ 0, 1728 then Xe(7) C 
has equation F = where 

F = 12x^z + lOSx^y^ + Sc^x^z^ + 72c^xy^z - 108c4i/^ - l^c^xyz^ 

+ Mc^y^z + clxz^ - Ibcly'^z^ + c^c^yz^ + 768A^^, 

and X'^{1) C has equation G = where 

G = 3a;^ + c^x^z — ISc^x'^y'^ — Sc^x'^yz + 2AcQxy^ + 'ic\xy'^z 

- 9cly^ - c^cey^z + 168 Ax^^ + 1728 Ay^z"^ + 5C4A/. 

Proof: The covariant columns x, VF x Vif, He have degrees 1, 8, 15, and the 
contravariant columns VF, xx e, H'^VH have degrees 3, 10, 17. The determinants 
of the matrices formed from these columns are 

det(x, (VF X VH), He) = 72H^ - AaFH 

^^^^ det(VF, (x X e), H'^VH) = 72H^ - Ac^FH'^. 

The coefficients of the quartic F(a;, z) = F(a;x + y{WF x Vif) + zHe) are in- 
variants. Using linear algebra to rewrite these invariants as polynomials in F, H, C4 
and Cq we find 

F{x, y, z) = Fx'^ + l2H'^x'^z + (lOSi^''^ - QcAF)x^y'^ - SceFxy^ 

+ 3c4H^x'^z^ + {72c4H^ + 4128^27^4 + ASc^F^H - 768F^H^)xy^z 

+ {-lOSciH^ - 3clF - 11376^2^4 + 32c4F^H + 3392F^H^ - 256F^)y^ 

- 12ceH^xyz^ + {SAcqH^ - lQc&F^H)y^z + {cIh^ + 688FH^ 

+ Sc^F^H'^ - l28F'^H^)xz^ + {-15cIh^ - 10512Fi?^ - 38404^^^^ 

+ GIUF'^H^ + 96ciF^H^ - 768F'^ H^)y^ z^ + {ciCeH^ - 8ceF^H'^)yz^ 

+ (768iJ^° - 36c4Fi?^ - cIf^H^ + 176F^H^ + 16c4F^i?^ - 64F^i?^)z'^. 
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Likewise G{x, y, z) = F{xVF + ?/(x x e) + zH^VH) becomes 

G{x, y, z) = {3H^ + 28F^)x'^ + {aH^ + 168F'^H^)x^z + {-ISc^H^ 

- 816F^H^ - 2AciF^ + l'd2F^ H)x'^y'^ - SceH^x^yz + lAceH'^xy^ 

+ {222FH^ + 2AF'^H^)x^z^ + (Sc^F^ + SJUFH^ - 576F'^H^)xy'^z 
+ (-9c^i?2 - blSAFH^ - 240c4F^H^ - AcjF^ + 2240F^H^ + MaF^H 

- 256F'^H^)y^ + {-CiCQH^ + 8c6F^H^)y^z + (168^^ + 

+ 2AF^H'^)xz^ + (1728i?^ - 78caFH^ + SIQF^H'^ + 24c4F^F*^ 

- imF^H^)y^z^ + CQFH^yz^ + (5c4F^ + 35F^H^° - 4:F^H^)z^. 

Let (a : 6 : c) be the A'-point on X(7) corresponding to (i?, 0) for some choice of 
symplectic isomorphism : i?[7] = /iyxZ/TZ. By Lemma we may scale (a, b, c) 
to satisfy f ll2p . Then by Lemmas 11.61 and 13.41 a formula for Xe{7), respectively 
X^{7), is given by specialising the coefficients of F, respectively G, to this choice 
of (a,6, c). Explicitly we set F = 0, divide through by H^, respectively H^, and 
replace by A. □ 

Remark 3.7. The equations for Xe{7) and X^{7) given in Theorems 11.21 and 13 . 6 1 
are related by F{x,y,z) = ^F{6c4^z — ^y,x, —18z) and Q{x,y,z) = G{9c4y + 
z, 3x, 108?/) where a = — 27c4 and b = —54:Cq. 

3.2. Formulae in the case n = 9. We recall that X(9) = {Fi = F2 = 0} C 
where Fi = a% + b^c + c^a and F2 = ab"^ + bc^ + ca"^ - d^. Let G ^ SL2(Z/9Z) be 
the image of p : SL2(Z/9Z) — )• SL4,{K). It is generated by 
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Let X'- G ^ ji^he the character given by Diag(Cg, Cg ; Cg > Cg) ^ Cg- 

Definition 3.8. An invariant of type r G {0, 1, 2} and degree m is a homogeneous 
polynomial / = /(a, 6, c, d) of degree m such that I o g = x{gYl for all g E G. 

The type invariants of smallest degree are D = — (a^ + b^ + — 3abc)d and 
Jg = 2(0^6 + 6^0 + c^a) + 5(a^c2 + b^a^ + c%'^) + 2{)abc{a% + b'^c + c^a) - 3d^. Writing 
A and i? for their matrices of second partial derivatives we find 

det(A + tB) = 81D^ - 1620DlQt + 2700/i2t^ + 90000DV. 
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where lu is a type invariant of degree 12. 



Definition 3.9. A covariant column, respectively contravariant column, of type 
r G {0, 1, 2} and degree m is a column vector v = {vi, V2, v^, ^4)"^ of homogeneous 
polynomials of degree m in variables a, b, c, d such that vog = x{.9Yg^-i respectively 

V o c/ = xigYg''^^, for all g eG. 

We note that xi = (a, b, c, d)^ is a covariant column of type and degree 1, 



whereas if / is an invariant of type r and degree m then V/ = (|^, |^)"^ 
a contravariant column of type r and degree m — 1. To construct some further 
examples we define 4x4 alternating matrices 



IS 



A,, 





-qi{a,b,c)d'^ 
qi{c,a,b)d^ 
\ -ti{a,b,c) 

for i = 0, 1, 2 where 

qo(a, b, c) = 3(a^ + 26c) 
qi{a,b,c) = 3(c^ + 2a6) 
q2(a, b, c) = 3(6^ + 2ac) 



qi{a,b,c)d'^ —qi{c,a,b)d'^ rj(a,6, c)^ 

qi{b, c, 0)0?^ rj(6, c, a) 

— qj(6, c, a)d^ ti{c, a, b) 

-ti{b,c,a) -ti{c,a,b) y 



to(a, 6, c) = 2(a^6 + c^fe) - 3a^c^ - 6^ 
ri(a, b, c) = 2(6^c + a^c) - Sb'^a^ - 
t2{a, b, c) = 2(c^a + b^a) - 3c%'^ - a^. 



For M a 4 X 4 alternating matrix and v a column vector we define a column 
vector M * V by the rule (M -kv)i — Y^ MijVk where the sum is over all (i, j, k) 
for which (i, j, k, I) is an even permutation of (1, 2, 3, 4). We define covariant and 
contravariant columns 



Xy = AoVD 
67 = AiVD 



eg = AiV/e 
= A2VD 



U5 = Ai ★ xi 

Vii = A2 ★ Xy. 



Then C4 = X7 • U5 is an invariant of type 1 and degree 12, and ce = |(x7 • V/12) 
is an invariant of type and degree 18. Routine Grobner basis calculations show 
that C4,ce ^ (-^1,-^2) yet 

4-4 = 1728^^ mod (Fi, F2). 

Lemma 3.10. The j -invariant X{9) — >■ is given by j = cl/D^. 

Proof: Both j and jo = (^/D^ define maps X(9) that quotient out by the 

action of G/{±I} = PSL2(Z/9Z). So they can differ by at most a Mobius map. 
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We recall that j is ramified above 0, 1728 and oo with ramification indices 3, 2 
and 9. Since 

= F2 = C4 = 0} < 9deg(c4) = ||G/{±/}| 
= F2 = C6 = 0} < 9deg(c6) = i|G/{±/}| 
=F2 = D = 0} < 9deg(D) = ||G/{±/}| 
and jo — 1728 = cl/D^ it follows that j = jo as required. □ 

Lemma 3.11. LetE/K be an elliptic curve and (j) : i?[9] = /i9xZ/9Z a symplectic 
isomorphism over K . Let {a : b : c : d) be the corresponding K-point on X(9) C P'^ 
with co-ordinates (a, 6, c, d) scaled so that 

(15) Ci{a,b,c,d) = ca,{E) and CQ{a,b,c,d) = cq{E) 

where E has Weierstrass equation y'^ = x^ — 27c4{E)x — 5Acq{E). Ifj{E) ^ 0, 1728 
and h G GL4^{K) is a matrix whose columns are covariant columns, respectively 
contravariant columns, of types ri, . . . , r4 and degrees mi, . . . , m4 with rrii + 6rj 
constant mod 18, evaluated at {a,b,c,d) then 

respectively 

a{h)h-^ oc p(a(0)0-^)-'^, 

for alia e Gal(K/K). 

Proof: Let = £ SL2(Z/9Z). Recalling that p describes the action of 

SL2(Z/9Z) on X(9) C we have 

(16) cr((a, b, c, d)^) = A^p(^<^)(a, b, c, d)^ 

for some Ao- G . Since C4 and cq are invariants of types 1 and and degrees 12 
and 18 we deduce 

a(c4,{a, b, c, d)) = A^^Xo-C4(a, b, c, d) and a(cQ{a, b, c, d)) = X^^CQ^a, b, c, d) 

where Xa = x(p(^o-))- Since C4{E),ce{E) E K it follows by ( IT5|) and our assump- 
tion j{E) ^ 0,1728 that Xl^Xa = = 1- Hence A„ is an 18th root of unity 
and Xa = ^t- Now suppose the columns of h are obtained by specialising covari- 
ant columns, respectively contravariant columns, of types ri, . . . ,r4 and degrees 
mi, . . . , m4 with + 6rj = r (mod 18). Then by ( !T6|) and Definition 13.91 we have 

a{h) = h o (X^piU) = KpiUK 

respectively 

a{h) = ho {X.p{^^)) = Xlpi^^r^h. 
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□ 

We use Lemmas ll.Gl and rS. in to compute equations for Xe{9) and X^(9). First 
we construct some more covariant and contravariant columns. Let Vg be the 
contravariant column of type 2 and degree 9 given by 

Vg = ifid, f2d, fsd, -afi - 6/2 - c/3)'^ 

where 

/i(a, b, c, d) = a^ + 35a%c + 42a%^ + 7a^c^ + 105a%h^ + 28aV 
+ 231a^6^c - 196a^6c^ + Ua^c^d^ + Ua^^ - TOa^fo^c^ - Ma%^cd^ 

- 2la^c^ + 28a6^rf^ - lOSafo^c^ - lAahc^d^ - 27acd^ + 196^c 

- 356^c^ + Ub^c^d^ + 27b^d^ - 27bc^ + Uc^d\ 

/2(a, b, c, d) = flip, c, a, d) and /a (a, 6, c, d) = /i(c, a, b, d). We further put 

Xi3 = AiVg Xi5 = AiVii fi3 = AoVg. 

In the following lemma the entries of the covariant and contravariant columns 
are viewed as elements of the co-ordinate ring K[a, b, c, d]/ {Fi, F2). The lemma is 
included to show that we have been systematic, rather than because it is needed 
in what follows. We therefore omit the proof. 

Lemma 3.12. The covariant columns, respectively contravariant columns, of type 
r G {0,1,2}, mod (^1,^2), form a free K[D,CQ]-module of rank 4 with basis as 
indicated in the following table. 



Covariants Contravariants 



Type 


Type 1 


Type 2 


Type 


Type 1 


Type 2 


Xl 




h 


VD 


U5 


Vg 


X7 


eg 


fl3 


V/e 


VC4 


Vll 


Xl3 


C4X1 


£467 


V/12 


C4VL' 


C4U5 


Xl5 


C4X7 


0469 


VC6 


C4V/6 


C4VC4 



Theorem 3.13. Let E/K be an elliptic curve with Weierstrass equation y"^ = 
- 27 dx - 54c6. IfjiE) 7^ 0, 1728 then Xe{9) C has equations Fi = F2 = 
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where 

Fi = 2Ax^t - 9Qxyz + QAy^ + 2Ac4yH + ASc^yz^ - ASceyzt + Uclyt'^ 

- Scqz^ + Uclzh - QciCQzt^ - {cl - 2c6)t^ 

O 

F2 = 16x z — 6Axy — Wc^xyt — IGc^xz + IGcQXzt — Ac^xt + 8OC4?/ z 

— 32cQyH — ?>2cQyz^ + ?)2(?^yzt — Sc^CQyt'^ + 8c1z^ — 12ciCQZ^t 
+ {2cl + Acl)ze -clcQt\ 

and X^(9) C has equations Gi = G2 = where 

Gi = -72x'^y - lAAx^z + 2Ac4xyt - ASc^xzi - Sc^xf - c^y^ + ISc^y'^z 
+ 3ceyH + ISOdyz^ + Uceyzt - 3clyt^ + 792c4-2^ + Ucez'^t 
+ 2clzt^ + CiCet^, 

G2 = -864x^ + 216c4xH + 2592c4xyz + 216cexyt + 15552caxz'^ 

+ 432cGXzt - 72c^xt^ - 9cQy^ + 162cGy'^z + 27clyh + A212cGyz'^ 
+ lOSclyzt - 27c4C62/t^ + 2Q13QcqZ^ + 972clzH + ISc^Cezf 
+ {5cl + 4cl)t^ 

Proof: The covariant columns xi, fr, Deg, Z^xis have types 0, 2, 1, and degrees 
1, 7, 13, 19. The contravariant columns U5, D^VD, V/12, -D^vg have types 1, 0, 0, 2 
and degrees 5, 11, 11, 17. The determinants of the matrices formed from these 
columns satisfy 

det(xi, fr, Deg, Dxig) = 3456^^° mod (Fi, F2) 
det(u5, D^VD, V/12, D\g) = 1152D" mod (Fi, F2). 

For certain 2x2 matrices a = {aij) and /3 = [Pij), specified in Remark 13.141 
below, we put 

Fi{x, y, z, t) = {auFi + 0^2-^2) (a;xi + yi^ + zDeg + tDxis) 
Gi{x, y, z, t) = {/3aFi + Pi2F2){xu^ + yD^VD + zVh2 + tD\g) 

for i = 1,2. Using the Grobner basis machinery in Magma to write each coeffi- 
cient mod (Fi, F2) as a polynomial in C4 and Cg we obtained the equations in the 
statement of the theorem. By Lemmas 11.61 13.101 and 13.111 these are equations for 
Xs(9) andX^(9). □ 
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Remark 3.14. (i) The 2x2 matrices used in the proof of Theorem 13. 131 were 



1 



a 



9D6 



3fi 

'108^3 + 5^] 




. , -B 

and /3 = ^ 

ll62AE2 9(108^3 + 53) 



where A = d?' and B = a^^\?^c'^ 6abc. 

(ii) The equations for Xe{9) and X^{9) in Theorems I1.3l and l3.13l are related by 

Ti{x, y, z, i) oc Fi(x - 27 - 162c6t, 9y + 81c4t, -54^, 324t) 
Qi{x, y, z, t) oc Gi(— X + 9c4t, 36?/ + 362;, 6z, 108t) 

for i = 1,2 where a = — 27c4 and b = —5Acq. 

3.3. Formulae in the case n = 11. We recall that X{11) is the singular locus 
of the Hessian of the cubic threefold {F = 0} C P'* where 

F = a% + b'^c + c^d + dPe + e^a. 

Let G ^ PSL2(Z/11Z) be the image of p : SL2(Z/11Z) ^ GU(K). It is generated 

by 



1 

9ii 



(Cn- 




r3 _ (—3 


^9 


^-9 
Sll 




- 


- 


- cr/) 




^11 




/-9 A-9 






a4 

^11 


- Cn^ 


Cn- 


- Cn^ 




^9 _ 


Sll 






- Cn^ 


Cn 


- Cn^ 


- 


- Ci? 






^-5 


/•4 A-4 


Cn 


- Cii' 


Sn 


- 


- 

Sn 


_ ^-9 




[cfi - 




Cii - Cn 


C?i 


- Cii' 


A9 


- Cn^ 


Cfi- 


- CnV 








Cn) where 


911 = 


= 1 + 2(Cii 


+ C!i 


+ C?i 


+ Cfi 


+ Ci\). We 



define the invariants, covariant columns and contravariant columns exactly as in 
Section 13.11 Let ^ denote a sum over all cyclic permutations, so that for example 
F = ^ a%. Other examples of invariants of small degree include 

H = Sabcde + ^{a^c^ — a^de), 

h = E(«*^e + 3a5rf2 _ 15^4^^^ ^ ^a^h^d + ISa^^cd^), 

Jg = ^(a^c - laW - 7a^de^ + 7a%^c^ + 21a^c^d^e). 

Writing A and B for the matrices of second partial derivatives of F and H we find 

det(A + tB) = 32H - 32/7t - 24/9^2 - gc^t^ + ... 

where Jg and C4 are invariants of degrees 9 and 11. We will not need a complete 
set of generators for the ring of invariants, but note that this is given in |S] and 
may also be computed using Magma. Let I be the homogeneous ideal of X(ll), 
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i.e. the ideal generated by the 4x4 minors of the Hessian matrix of F. The degree 
19 polynomial 

cg = a%^^ - 509b^^d - Umb^U^e + 5106^c^° + 423266^c/^^ + 20669b^d^^e 

- 141076^^^6^^ - 2774:19bc^d^°e^ - 2489096cc/^^e - 209926bcd^e^^ 
+ 7624096c/"e^ + be^^ - lOlSc^^e - 14107c^^rfe^ - 586835c^^ci^e^ 

+ 197780c^°rf^e^ + 1019c^rfi° - 787130c^c/^e^ + 15634c^rf^^e + 423260^6^2 
+ 2007576c^c/^e^ + 247382c^rf^2e2 - 528424c^de^^ - 616653c^d^e^ 
+ 376744c^ci^3e^ + 1067732c^rf2gi4 _ 2250040^^^6^ + 463659cd^^e^ 

- 582142cd^ei^ + 70511d^e^° 
is not an invariant but satisfies 

= abcde{cl - 1728F^^) (mod X). 

Lemma 3.15. The j -invariant X(ll) — > is given by j = c\/ F^^ . 

Proof: Both j and jo = c\/F^^ define maps X(ll) — )■ that quotient out by 
the action of G = PSL2(Z/11Z). So they can differ by at most a Mobius map. We 
recall that j is ramified above 0, 1728 and oo with ramification indices 3, 2 and 
11. It is shown in [Ml Corollary 23.28] that X(ll) C P^ has degree 20. Since 

#X(11) n {c4 = 0} < 20deg(c4) = \\G\ 

#X(11) n {Z, = 0} < 20deg(c6) < |G| 

#X(11) n {F = 0} < 20deg(F) = l^\G\ 

and jo ~ 1728 = / {{abcde)F^^) it follows that j = jo as required. □ 

Lemma 3.16. Let E/K be an elliptic curve and (j) : £'[11] = /in x Z/llZ a 
symplectic isomorphism over K . Let {a : b : c : d : e) be the corresponding K-point 
on X(ll) C P^ with co-ordinates {a,b,c,d,e) scaled so that 

(17) C4^{a,b,c,d,e) = C4^{E) 

where E has Weierstrass equation y"^ = x'^ — 2'lCi{E)x — 54c6(-E'). If j{E) ^ 
and h G GL^{K) is a matrix whose columns are covariant columns, respectively 
contravariant columns, of the same degree mod 11 evaluated at {a,b,c,d,e) then 

respectively 

for allae Gal(K/K). 
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Proof: The proof is similar to that of Lemma 13^ Recall that C4 is a homogeneous 
polynomial of degree 11 and so ( 1T71) determines the scaling of {a,b,c,d,e) up to 
an 11th root of unity. □ 

We use Lemmas 11.61 and 13.161 to compute equations for Xe{11) and X^(ll). 
First we construct some covariant columns. Let xi = (a, b, c, d, e)^. If 7 G 
SL2(Z/11Z) is diagonal then p(7) cyclically permutes the co-ordinates a, b, c, d, e. 
A covariant column is therefore uniquely determined by its first entry. By averag- 
ing over the group we found covariant columns X4,X5,X9 with first entries 

/4 = 20^6^ + iab'^c - Aac^d + Abce^ + (^^ 

/5 = -5a^ce + ba%^d + ba^cd^ + 5a6c^e - IQabde^ + - bb^cd + 5bd^e + 5c^e^, 
/g = -UaHde - 8a^bd^ + 9a^c^e^ + 2a^de^ + 8a%^e + 5a%'^c^ + 63a%'^cde 

+ Ga^c^d - ISa^c^d^e + Sa^d^e^ + Sla^b^d^ - 21a^b^e^ + 47a^b'^cd^ + SSa^^c^e^ 
+ Ua^bcde^ - Ua^c^d"^ + lOa^d^e + Sa'^b^ce - 26a'^b^c^ - 4:2aH^c^de 

- TbaH^d'^e^ + Sa^ft^e^ + ISa'^bc^d - 2,QaHc^d^e - ma^bcd^e^ + 2a^c^e'^ 

- Qa^cde^ + a^d'^ - 2ab'^d - Qab^cd^ + 50a6^ce^ - lab^c^d^ - Qab^d^e 

- Mab^c^e^ - 'iab^c^de' - 9ab^d^e^ - 29abc^d'^ + 21abcd^e + abe'^ + dae'de'^ 
+ 25ac^d^e^ - 7acd^e^ - lOb^c^e - 2b^de^ + 46^c^ + AOb^^de - Qb'^cd^e^ 

+ m^ce' - 3b^d^ - Ibb^c^d^e - Mb^c^d^e^ + Slft^d^e^ - 116c^e^ + ^hc^de' 

- 2bcd'^ - 7bd^e^ - c^d^ + bd'd^e - 9c^d^e'^ + 8cd^e^ - e^. 

We temporarily write oi, . . . , as for a, b, c, d, e and let S be the 5x5 alternating 
matrix with entries 

„ _dF dh dF dh 
dttr dtts dttg dar 

where r = (i — j — 2)'^ + i + 3 (mod 5) and s = (j — i — 2)^ + j + 3 (mod 5). Then 
Xi4 = SV/7 is a covariant column of degree 14. 

Theorem 3.17. Let E/K he an elliptic curve with Weierstrass equation = 

- 27ciX - 54c6 and let A = (c^ - c^)/1728. Ifj{E) ^ 0, 1728 then Xe{11) C 
is the singular locus of the Hessian of 

F = t> + 3v w + CiV y + 3vw + 2c4vwy — CiAvx + ASAvxy 
+ 9w^ + dc^w'^y — clw'^z + clwy'^ — 576Awyz + 72c4Aw2;^ 
- AA'^x^ - 72A^x^z + ^c^Axy^ + 2(?^Axyz - (c^A - 1728A2)x22 
+ 64Ay^ - 72ciAy^z + l2clAyz^ + (c^A - MhQA^)z^, 
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and X^(ll) C is the singular locus of the Hessian of 

- 2mAvwz - IQciVxy + 1680i;y^ - %12ciVyz + I2lclvz^ 
+ SA^ty^ + AAc^Aw'^y - llclAw^z + c^Awx'^ + 33QAwxy 

- I22C4AWXZ + 25clwy'^ - UlQOAwyz + SnciAwz"^ - 20Ax^ 
+ bclx^y - l^UAx^z - 36Ac4xy^ + IGOclxyz - 34764:Axz'^ 

+ 19840?/^ - 10268c4?/^z + 16A3clyz^ - 129220Azl 

Proof: The covariant columns Xi, X4, X5, Xg, X14 have degrees 1,4,5,9,14 and 
the contravariant columns VF, V/7, V/g, V/g, VC4 have degrees 2, 6, 7, 8, 10. The 
determinants of the matrices formed from these columns satisfy 

det(xi, X4, X5, Xg, X14) = C4 — 1728F^"^ (mod X) 

^^^^ det(VF, V/7, V/g, V/g, VC4) = 55{cl - 1728F") (mod X). 

The coefficients of the cubic F{v, w, x, y, z) = F(t>xi+t(7X4+xx5+?/X9+2;xi4) are 
invariants. Using the Grobner basis machinery in Magma to rewrite the coefficients 
mod X as polynomials in C4 and F we find 

F = Fv^ + 3F'^v'^w + C4V^y + 3F^vw'^ + 2FciVwy - dvx^ + ASF^vxy 
+ QF^w^ + bF'^aw^y - clw^z + clwy^ - 576F^wyz + 72^^04^^^ 
- AF^x^ - 72F^x^z + AF^dxy'^ + 2F^clxyz - (4 - l728F^^)xz^ 
+ GAF^y^ - 72F'^C4y^z + UF^clyz'^ + {F^cl - 3A5QF^^)z\ 

Likewise G{v, w, x, y, z) = F{v'VF + wVIj + xV/g + y V/g + -2Vc4) becomes 

G = hF^v^ - C4V^x - QOF^^y + 28Fc4V^z - 2Fc4VW^ - ASF^vwx 

- 2A0F^vwz - IQF^dvxy + 1680F%?/^ - 872F^C4vyz + I2lclvz^ 
+ 8F^w^ + AAF^c^w'^y - \\c\u?z + F^c^wx"^ + 336F'^wxy 

- 122F%wxz + 25clwy^ - lAlGOF^wyz + SUF^c^wz"^ - 20FV 
+ 5clx^y - 188AF^x'^z - 36AF%xy'^ + IGOFclxyz - 34764F^a;^^ 
+ WSAOF^y^ - 10268F^C4y^z + 16A3F^clyz^ - 129220^^°^^ 

Let {a : b : c : d : e) he the /^-point on X(ll) corresponding to {E, (p) for some 
choice of symplectic isomorphism (p : E[ll] = fiu x Z/llZ. By Lemma (3.151 we 
may scale (a, b, c, d, e) to satisfy ( TT7I) and F{a, b, c, d, e)^^ = A. Moreover the deter- 
minants (fTSl) are non-zero by our assumption j{E) ^ 1728. Then by Lemmas 11.61 
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and 13.161 cubics describing Xs(ll) and X^(ll) are obtained by putting 

F{v, w, X, y, z) = -^FiFv, w, F^x, F'^y, F^z) 

(19) I ^ 

G{v, w, X, y, z) = j^G{F\, F\ y, Fh) 

and replacing by A. □ 

Remark 3.18. The cubic forms describing Xe{^1) and X^(ll) in Theorems 11.41 
and 13.171 are related by 

1 

2~d 



J^{v, w, X, y, z) = -^^^F^—v', w', — 864x, — 36c4X — lOScg^;, 72y) 



g{v, w, X, y, z) = 2536(55cg)3 ^(^''' -427680?/, x", -y", -z") 

where a = — 27c4, b = — 54c6 and 

v' = cqv + 2cqw — 6c|x + 3c1y — dc^CQZ w' = cqv + 6c1x + ^cfy + dc^c^z 

v" = 44(2c4f - 6cew + 33c6X + 135c|?/ + 8IOC4C62) x" = 60{5v + 729c4y + 2l87cez) 
y" = ll{c4V — Scqw — 6cqx) z' = 60(t> + 27c4y + SIcqz). 

4. Diagonal twists 

We give an alternative construction of XE{n) and X^{n) in the case E is an 
elliptic curve whose n-torsion contains a copy of the Galois module fin- 
Let C ^ D he an isogeny of elliptic curves with kernel a labelled copy of fin- 
Then the dual isogeny has kernel a labelled copy of Z/nZ. The pairs of such 
curves are parametrised by the modular curve Yi{n). In the cases n = 7, 9 we 
choose a coordinate A on Xi{n) = P^. In the case n = 11 we recall that Xi(ll) is 
the elliptic curve + u = — X^. We write A to indicate A in the cases n = 7,9 
and the pair A, u in the case n = 11. Let Cx and Dx be the corresponding pairs 
of ra-isogenous curves. By [Si, Exercise 8.13] Dx has Weierstrass equation 

n = 7 y2 - (A' - A - l)xy - (A=^ - X^)y = x^ - {X^ - X^)x^ 

n = 9 y^ + {X^ - 3A2 + 4A - l)xy + A(A - l^iX^ - A + l)y 

= x^ + X{X - 1){X^ - X + l)x\ 
n = ll y'^ + (Az/ + 2A - (z/ + lY)xy - AV(z/ + 1)(A - z/ - l)y 

= x^- Az/(z/ + 1)(A -u-l)x^. 
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On each of these curves P = (0, 0) is a point of order n. If we write the Weierstrass 
equation for Dx as y'^ + aixy + a^y = + a2X^ then by Vein's formulae |Vlj the 
n-isogenous curve Cx has Weierstrass equation 

(20) y"^ + aixy + a^y = + a2X^ — 5tx — (a^ + 4a2)t — 7w 

where t = 6s2 + {af + 4a2)si + aia^SQ, w = lOss + 2(a^ + 402)^2 + Saia^Si + a^So 
and Sk = X]j=^^''^^ ^(i-P)'^- The Weierstrass equations ( l20l) have discriminant 

n=7 A(Ca) = A(A-1)(A3-8A2 + 5A + 1)^ 

(21) n = 9 A(Ca) = A(A-1)(A^-A + 1)3(A2-6A2 + 3A + 1)^ 

n = 11 A{Cx,u) = A(A - l)(Az/ + 2X^ - 2A + l)(z/ + 1)V(A, i^Y^ 

where /(A, z/) = (-3Az/ + 2z/ - A^ + SA^ - 5A + 1)/(A - 1). 

Lemma 4.1. Let E/K he an elliptic curve and t : ^ E[n] an inclusion of 
Galois modules. Then there exists Q G E{K)[n] and q G / {K^)"- such that 

(i) en(t(C), Q) = for all ( ^ l^n, _ 

(ii) a{Q) -Q = for all a G Gal{K/K), and 

(iii) K{E[n]) = K{^,',^). 

Proof: This follows by standard properties of the Weil pairing, together with 
Hubert's Theorem 90. □ 

Taking E = Cx compute q = q{X) as described in |Fll Section 1.2]. 

A^(A-l) ifn = 7 

(22) g(A) = <; A(A-1)^(A2-A + 1)3 if n = 9 

Az/2(A- l)(A-z/- 1)3 ifn = ll. 

We consider the following diagonal twists of X(n) for n = 7, 9, 11. Recall in the 
case n = 11 we take the singular locus of the Hessian of the cubic form. 

^[^1, 6, 6] = {^ix'y + ^2y'z + ^,z'x = 0} c p2 

/ ^ix^y + i2y'z + i^z^x = 1 3 

^[6, 6, 6, ^4, ^5] ~ {ixv'w + i2w'x + i^x^y + ^42/'^ + Cs-s't' = 0} C 
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Lemma 4.2. The diagonal twists are determined up to K -isomorphism by 9 E 
where 

[ (ei^ada)' ^fn = 11. 

Moreover if we replace 9 by 9^ where k is a square in (Z/nZ)^ then we obtain 
isomorphic twists. 

Proof: The first part is proved by rescaling the co-ordinates and the second part 
by cychcally permuting them. (The expression for 9 in the case n = 11 has been 
squared to simphfy the statement of the next theorem.) □ 



Theorem 4.3. Let E/K be an elliptic curve and l : fin ^ E[n] an inclusion of 
Galois modules. If q E /{K^)"' is as specified in Lemma \4.1\ then 

(i) XE{n) is the diagonal twist with 9 = q, and 

(ii) X]^{n) is the diagonal twist with 9 = q~^. 

Proof: Let x ■ Gal(K/K) Z/nZ be defined hj a{^)/ ^ = (^^''\ Then the 
symplectic isomorphism : E[n] = /i„ x Z/nZ; t(Cn) + uQ ^ {Cn^iV) satisfies 



0" 



Under our identification Aut(/in x Z/nZ) = SL2(Z/nZ) this corresponds to T^('^). 
If p{T) oc Diag(C^\ . . . , C^™) for some integers ri, . . . , r™, then 

/ii = Diag((^)^\...,(y^r-) 



and h2 = h^^ satisfy the hypotheses of Lemma [L 61 
If n = 7 then (ri, r2, r^) = (4, 2, 1) and we deduce 

XE{7)=X[q,l,l] X^(7)=X[g-i,l,l] 

If n = 9 then (ri, r2, r^, = (5, 2, 8, 0) and we deduce 

Xe{9) ^ X[l, 1, g; q-'] X^(9) ^ X[l, 1, g'^; q] 

If n = 11 then (ri, r2, r^, r^, r^) = (6, 10, 2, 7, 8) and we deduce 

Xe{11) = X[l, 1, q-\ 1, 1] X^(ll) = X[l, 1, g, 1, 1] 

The descriptions of ^^(n) and X^(n) now follow by Lemma [4.21 □ 
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It is sometimes convenient to rewrite Xf^-, 7-, 7-; ttVI as 
For this twist we have 6 = ^f^2^i'r]^ mod (K^)^. 

Corollary 4.4. Let E/K be an elliptic curve whose n-torsion contains a copy of 
the Galois module fin- Then writing E = Cx we have 

Xe{1) = X[X, A - 1, 1] Xe{9) = X[X, A - 1, 1; A' - A + 1] 

X^(7) = X[A - 1, A, A(A - 1)] X^(9) = X-[A, A - 1, 1; 1/{X' - A + 1)] 

and 

X^(ll) = X[A2(A - l)^ 1, (A - - 1)2, u, 1] 
X^(ll) = X[A(A - 1), 1, A - - 1, z/, u] 

Proof: This follows from Theorem 14.31 and the formula (!22|) for q{X). □ 

Remark 4.5. The formula for Xe{7) in Corollary 14.41 was found by Halberstadt 
and Kraus |HK2t Theorem 7.1] by specialising the formula in Theorem 11.21 and 
then making a (rather complicated) change of co-ordinates. We worked out the 
analogue of this in the case n = 9 before discovering the simpler proof presented 
here. 

5. Minimisation and reduction 

Let n = 7, 9, 11 and m = {n ~ l)/2. Given an elliptic curve E/Q the formulae 
in Section [1.21 give equations for X£;(n) C P™"^ and X^{n) C P*""^. We search 
for elliptic curves n-congruent to E by searching for Q-rational points on these 
curves. It helps with this search if we first make a change of co-ordinates over Q to 
simplify the equations, i.e. so that they have small integer coefficients. Following 
|CFS] this task naturally falls into two parts, called minimisation and reduction. 
In minimisation one seeks to remove primes from a suitably defined invariant. 
Then reduction, which may be thought of as the analogue of minimisation at the 
infinite place, makes a final GLm(Z)-transformation. 

5.1. The invariant. 

Definition 5.1. We split into the cases n = 7,9, 11. 

Case n = 7. The invariant of a twisted form of F = x^y + y^z + z^x is 

^(/x(FoM)) = /^^(detM)^ 
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Case n = 9. The invariant of a twisted form of (Fi, F2) = {x^y + y'^z + z^x, xy"^ + 
yz^ + zx"^ - t^) is 



Case n = 11. The invariant of a twisted form of F = v'^w + w'^x + x'^y + y^^; + 
is 



Lemma 5.2. Let J-" he one of the twisted forms in Definition \5.1\ Then 

(i) '^{J^) is well-defined, i.e. it is independent of the choice of M G GL.m(-ft'). 

(ii) If has coefficients in K then '^{J^) G K. 

Proof: (i) This is easy to check for M a scalar matrix. In general we use that 
Aut(X(?2)) = PSL2(Z/'n,Z). This is proved in |AR[ Lemma 20.4] for n > 7 prime, 
and the same proof works for n = 9. We are reduced to considering M = p{^) for 
some 7 e SL2(Zi/?T,Z). It now suffices to recall (see the proof of Proposition 12. 3p 
that the only 1-dimensional characters of SL2(Zi/?t,Z) are those of order 3 in the 
case n = 9. This explains why in the case n = 9 we defined the invariant as 
{a5 - /37)6(det Mf and not just {a5 - /37)2(det Mf. 

(ii) This follows from (i) by Galois theory. □ 

Remark 5.3. (i) In the case n = 7 it is shown in |PSSt Section 7.1] that ^'(J^) is 
an integer coefficient polynomial in the coefficients of J-". We expect that similar 
formulae exist in the cases n = 9 and n = 11. 

(ii) The twisted forms in Theorems II. 2[ 11.31 and 11.41 have the following invariants. 
These were computed by following the proofs in Section [3l 



^((aFi + /3F2) o M, (7F1 + 5F2) o 



M) = {a5- Mf{deiMf. 



^(/i(FoM)) =/i^(det Mf. 



n = l -4(4a3 + 276^) 16(40^ + 276^)2 
n = 9 -2i0(4a3 + 2762)4 2^{^o? ^iWf 
n = \\ -4 (4a^ + 276=^)2 8(40^ + 2762). 



(iii) The diagonal twists studied in Section H] have invariants 



n 



n 



9 X[6,6,e3;r/] 



n 



^-[6,6,^3;^/] ^ 
11 6,6,^4,^5] ^ 
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5.2. Minimisation. The level of a model J-" at a prime p is the p-adic valuation 
of the invariant, i.e. fp(\l/(J-')). We seek to make a change of co-ordinates that 
minimises the level. This is a local problem. 

Theorem 5.4. Let E be an elliptic curve over Qp with p ^ 2,3. If n = 7,9,11 
then XE^n) and X^{n) admit models (with coefficients in Xp) with the following 
levels. 



Kodaira Symbol 






Xe{11) 




Im, m = (mod n) 














ImM, {m/n) = +l 


1 


2 


2 


1 


ImM, (m/n) = -l 


2 


1 


1 


2 


II, ir. III, iir, IV, IV* 


2 


2 


2 


2 



Kodaira Symbol 


X£;(9) 




Kodaira Symbol 


XEi'd) 


^e(9) 


Im, Im m = {) (mod 9) 








II, IV* 


5 


7 


Im, Im m = 3, 6 (mod 9) 


3 


3 


III, III* 


6 


6 


Im, Im m = l (mod 3) 


4 


5 


IV, II* 


7 


5 


Im, Im rn = 2 (mod 3) 


5 


4 









Proof: Replacing _E by a quadratic twist does not change the curves XE{n) and 
X^{n). So we may assume that either (i) E has good reduction, or (ii) E has 
split multiplicative reduction, or (iii) E has additive reduction of type II, III or 
IV. We split into these three cases. 

(i) If E has good reduction then by Remark I5.3( ii) the formulae in Theorems 11.21 
11.31 and 11.41 give models for XE{n) and X^{n) of level 0. 

(ii) If E has split multiplicative reduction then by the Tate parametrisation E[n] 
contains a copy of the Galois module So we may apply the results of Section HI 
More precisely if E has Kodaira symbol Jm then -E(Qp) — Qp /q^ for some q & Qp 
with Vp{q) = m > 1. It may be verified by computing the Weil pairing that the 
conditions of Lemma [4.11 are satisfied. So by Theorem 14.31 the curves XE{n) and 
X^{n) are the diagonal twists with 6 = q or q~^ . If n = 7 or 11 then by Lemma 112] 
they admit models of the form ^2, • • •] where at most two of the have p-adic 
valuation 1 and the rest are units. We read off the level from Remark 15.3 ( iii). The 
case n = 9 is similar. 

(iii) Finally suppose E has Kodaira symbol II, III or IV. In terms of a minimal 
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Weierstrass equation for E, say y"^ = + ax + b, these are the cases 

II Vp{a)>l Vp{b) = l, 

III Vp{a) = 1 Vp{b) > 2, 

IV Vp{a) > 2 Vp{b) = 2. 



Integer-coefficient models of the required level are obtained by modifying the for- 
mulae in Theorems 11.21 11.31 and 11.41 as follows. 





XEi7) 




XEill) 




II 
III 

IV 


J'{x,y,z) 
^T{px,py,z) 
jjF{x,py,z) 


^g{x,y,pz) 
G{x,ly,z) 
^g{x,ly,pz) 


^J'{pv + w,w,x,y,z) 
^T{pv,pw,x,y,z) 
^J'{pv,pw,x,py - x,z) 


g{v,w,x,y,z) 
^g{pv,pw,px,y,z) 
^g{pv,w,px,y, ^z) 





Xe{^) 


^e(9) 


II 


^J^i{px,py,pz,t) 
jiJ^2{px,py,pz,t) 


^gi{px,y,z,t) 
lg2{px,y,z,t) 


III 


^J'i{px,py,z,t) 
^J^2{px,py,z,t) 


^gi{px,y,z,t) 
^g2{px,y,z,t) 


IV 


jiJ'i{p^x,p^y,pz,t) 
^J^2{p'^x,p'^y,pz,t) 


^gi{px,y,z,t) 
^g2{px,y,z,t) 



□ 

To compute integer-coefficient models with level as specified in Theorem 15.41 we 
could in principle follow the proof of the theorem. In practice however it is simpler 
to use a range of ad hoc tricks. We have not proved that these tricks always get 
down to the level specified in the theorem, but this does at least happen in all 
numerical examples we have tried. 

Again on the basis of some numerical experimentation, we conjecture that the 
levels in Theorem 15.41 are the minimal levels. At the primes 2 and 3 it seems the 
minimal levels can be larger. See Section [7] for some examples. 

5.3. Reduction. In Section [2^2] we saw that the action of SL2(Z/nZ) on X{n) C 
pm-i ^ p(^y) Yiits to an irreducible representation p : SL2(Z/nZ) ^ GL(\/). So 
by the Weyl unitary trick there is an SL2(Z/nZ)-invariant inner product on V , and 
this is unique up to scalars. To reduce our equations for XE{n) and X^{n) we run 
the LLL algorithm on the Gram matrix for this inner product. In the untwisted 
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case it is clear that the SL2(Z/nZ)-invariant inner product is the standard one on 
C", i.e. p is a unitary representation. So to compute the inner product it suffices to 
have numerical approximations to the matrices hi and /i2 in Lemma 11.61 Since our 
method for finding equations for XE{n) and X^{n) involved explicitly computing 
hi and /12 this is obviously something we can do. To use these formulae we need 
numerical approximations for a,b,c. . . in Lemmas 13. 4[ 13.111 and 13.161 These are 
computed by evaluating suitable g-expansions. See jEj or jHK2j for the relevant 
formulae in the case n = 7. 



6. Modular interpretation 

In Section[3]we gave explicit formulae for XeIti) and X^{n) for n = 7,9, 11. In 
this section we give equations for the families of curves they parametrise. 

6.1. Computing the j-invariant. We first give formulae for the j-map ^^(n) 

and X^{n) — P^. This is sufficient for some applications: see for example 
|PSS] . In each case we adapt the formulae in Lemmas 13. 2[ 13.101 and 13.151 by 
writing them in an way that behaves well under all changes of co-ordinates. 

Case n = 7. Let X = {J" = 0} C P^ be a twist of X{7). Starting with J" in 
place of the Klein quartic F the formulae in Section [3?T] define polynomials H{J^), 
C4(J') and ce{T). If = o M) then ^(J") = fx^{det Mf and 

if(jr) = /,3^detM)^(iJ oM) 

(23) C4(J^) = /i^(det M)^(c4 o M) 

C6(J^) = /2(detM)9(c6oM) 

As noted in |PSS] the syzygy c\ — c\ = \72%H'^ (mod F) becomes 

Ci{J^f - C(i{rf = 1728 ^(J^) Hi^y (mod T). 
In particular the j-map X — )■ P^ is given by 

Case n = 11. Let X C P"^ be a twist of X(ll) given as the singular locus of 
the Hessian of a cubic form = J-'{v, w, x, y, z). Starting with in place of the 
cubic form F = v'^w + w'^x + x^y + y'^z + z'^v the formulae in Section 13.31 define 
polynomials H{J') and 04(7"). If J" = /i(F o M) then ^(J") = /i^(det Mf and 

HiT)=fi\detMfiHoM) 

Ci{F) = /i^^(det M)^(c4 o M) 



ON FAMILIES OF n-CONGRUENT ELLIPTIC CURVES 



35 



By Lemma 13.151 the j-map X — )■ is given by 

■ _ C4(^)^ 

Case n = 9. Our construction of 04(0, 6, c, d) and C6(a, 6, c, c?) in Section [373] does 
not immediately generalise to twists of X(9). Instead we exploit the fact that 
the pencil of cubics defining X(9) C is naturally a copy of X(3) = P^. The 
notation Xm for a twist of X{n) was introduced in Section [Lll 

Theorem 6.1. Let Xm = {J^i = J'2 = 0} C be a twist of X{9) where M is a 
symplectic Galois module with M = (Z/9Z)^ as an abelian group. Then 

(i) Writing H for the determinant of the matrix of second partial derivatives 
we have 

'H{rFi + SF2) = f{r, s)D{a, b, c, d) 

where f and D are homogeneous polynomials of degree 4. 

(ii) We have Xm[3] — with cusps at the roots of f{r, s) = 0. 

(iii) For P G Xm with tangent line P + tQ write J^i{P + tQ) = '-jit^ + 5it^ for 
i = 1, 2. Then the forgetful map Xm Xm[3] is P y-^ (—72 : 7i)- 

Proof: We first prove the theorem in the case M = /ig x Z/9Z. 

(i) Taking Fi = a% + fe^c + c^a and F2 = ab"^ + bc^ + ca? — d^ we compute 

U{rFi + SF2) = 48(r^ + s^)s{a^ + b^ + - 3abc)d. 

(ii) Sinc(i M[3] = /is x Z/3Z we have Xm[3] = X{3). We recall from Section O 
that X(3) = P^ with cusps at the roots of A{27A^ + B'^) = 0. Our two choices of 
co-ordinates on X{3) are now related by {r : s) = {B : 3 A). 

(iii) We temporarily write ai, 02, as, 04 for a, b, c, d and let A2 be the 4x4 alter- 
nating matrix with {i,j) entry 

dF\dF2 _ dFi dF2 
dai da^ dak dai 

where {i,j,k,l) is an even permutation of (1,2,3,4). This is the same as the 
matrix A2 in Section 13.21 By direct calculation we find 

/a\ 

(a •■• mod(Fi,F2) 



da? 



A, 



dadd 



EH 

dadd 



dd'^ 



A2 = %D 



\dj 



^The pairing eg on AI induces a pairing 63 on M[3] by the rule 63(36', T) 
5 e M and T e A/[3]. 



eg{S,T) for all 
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for i = 1, 2, where 71 = 18d^, 72 = — 6(a^ + 6^ + + 6a6c) and D = —{a^ + + 
— 3abc)d. 

In Corollary 16.51 below we show that the forgetful map X(9) — )■ X(3) is 

(25) {a:b: c: d) ^ {A: B) = {d^ : + + + 6abc). 

Thus {B : 3^4) = (—72 : 7i) as required. 

Relaxing our restriction on M, the general case of the theorem follows since the 
forgetful map Xm — ^ -^a/[3] may be characterised geometrically, i.e. it quotients 
out by the symplectic automorphisms of M that act trivially on M[3]. □ 

Remark 6.2. If we only use Theorem 16. II to compute the j-invariant, then we can 
replace the forward reference (l25ll in the above proof by the observation that the 
polynomials C4^{A,B) and cq{A,B) in Section [L4l are related to the polynomials 
€4(0, b, c, d) and CQ^a, b, c, d) in Section [372] by 

Ciid^, + b^ + + 6abc) = 04(0, b, c, d) mod (Fi, F2), 

C(i{d^, + b^ + + Qabc) = Ce{a, 6, c, d) mod (Fi, F2). 

Since we already gave formulae for the universal families above Ye{3) and Yj^{3) 
in Theorem 11.11 the following corollary gives formulae for the universal families 
above Ye{9) and y^(9). 

Corollary 6.3. Let E/K be the elliptic curve y"^ = — 27c4X — 5Acq. Let Xe{3) 
and X^{3) be as given in Theorem and let Xe{9) and X^{9) be as given in 
Theorem \1.3\ with a = — 27c4 and b = —54cq. Then the forgetful maps Xe{9) — ?■ 
Xe{3) and X^(9) — )■ X^(3) are given by (A : yu) = (72 : 371) where 71,72 are 
computed by the tangent line construction in Theorem \6.1\( iii). 

Proof: (i) We have Xe{9) = {Ti = ^"2 = 0} C where J^i and J^2 are as given 
in Theorem 11.31 We compute Ti^rJ^i + sJ-2) = /(r, s)D{x, y, z, t) with 

(26) /(r, s) = r^ + 2ar^s^ - 4brs^ - ^a^/. 

On the other hand the family of curves parametrised by Xe{3) in Theorem 11.11 
has cusps at the roots of 

(27) D(A, /i) = - 6C4AV2 - ScgA/i^ - 3c^/. 

Comparing fl2Bl) and fl27|) we see that our two choices of co-ordinates on Xe{3) = 
are related by (A : /i) = (r : —3s). Taking (r : s) = (—72 : 71) gives the result. 

(ii) We have X^{9) = {Qi = ^2 = 0} C P^ where Qi and Q2 are as given in 
Theorem 11.31 We compute l-LirQi + SQ2) = f{r,s)D{x,y,z,t) with 

(28) /(r, s) = ar^ - 6brh - 2a^r^s'^ + 2abrs^ - (ia^ + 3b'^)s^. 
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On the other hand the family of curves parametrised by (3) in Theorem 11.11 
has cusps at the roots of 

(29) C4(A, fi) = c^X^ + 4c6AV + 6c^AV^ + 4c4C6A/i^ - (3c^ - 4c^)/. 

Comparing ( l28l) and ( |29l) we see that our choices of co-ordinates on X^{3) = 
are related by (A : yu) = (r : —3s). Taking (r : s) = (—72 : 7i) gives the result. □ 

6.2. Modular interpretation of X{n). In Section [2.11 we gave equations for 
X{n). We recall from |F0] that (analogous to Definition 12. 2p the elliptic curve 
E C P"~^ above (0 : ai : 02 : . . . : — 02 : —cli) G Y{n) has equations 

rank(ai_jXj+j)"jio < 2. 

Taking n = 7, 9, 11 we now put this curve in Weierstrass form. Notice that the 
Weierstrass equations have coefficients that are homogeneous polynomials of de- 
gree 4m and 6m for some integer m. 

Theorem 6.4. We split into the cases n = 7, 9, 11. 

(i) The family of curves parametrised by X{7) = {a^b + b^c + c^a = 0} C is 

(30) y'^ = - 27{abcfcA{a, b, c)x - 54(a6c)^C6(a, b, c) 

where C4, cq G K[a, b, c] are as defined in Section l3J[ 

(ii) The family of curves parametrised by X{9) = {Fi = F2 = 0} C P^ is 

y^ = — 27c4(a, b, c, d)x — 54c6(a, b, c, d) 

where C4, Ce G K[a, b, c, d] are as defined in Section [XM 

(iii) The family of curves parametrised by X{11) C P'* is 

(31) y"^ = x^ — 27 (abode) Ci{a, b, c, d, e)x — 54:{abcde)ce{a, b, c, d, e). 

where C4^,cq G K[a,b,c,d,e] are as defined in Section [Ql 

Proof: In Section H] we wrote A for a co-ordinate (or pair of co-ordinates) on 
Xi{n) for n = 7,9,11. With g(A) as defined in ( 122|) . we see by Lemma 14.11 
that X{n) is birational to {q{X) = r"} C Xi{n) x Gm- In the case n = 7 an 
explicit birational map is given in |FH Section 2.2]. Applying the same method 
for n = 9, 11 we obtain 

n = 7 (a : 6 : c) H-^ (A, r) = {-ac^/b^, ac/b^), 

n = 9 (a : b : c : d) ^-^ (\, t) = {—ac/b^, a^d/b^c), 

n = 11 {a : b : c : d : e) ^ {X, u, t) = {—abd/c^e, ab'^/c^e, —ab/c^). 
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We checked directly that these are birational maps, and that the cusps of X{n), 
i.e. (1 : : . . . : 0) and its translates under the action of SL2(Z/nZ), map to the 
cusps of Xi{n), i.e. the roots of ( 12T|) . 

Let C4(A) and cq{X) be the invariants of the Weierstrass equation for C\ in 
Section HI Using Magma we compute 

C4(— = ^j{abcYc4{a, 6, c) mod (a^b + If'c + c^a) 
CQ^-ac^/lP') = ^7(a6c)^C6(a, &, c) mod {a^h + Ir'c + c^a) 

C4^{—ac/b'^) = ^gC4(a, b, c, d) mod (Fi, F2) 

n = 9 

CQ{-ac/b ) = ^9C6(a, 6, c, (i) mod (Fi, F2) 

Ci{—abd/(?e^ab^/c^e) = ^^^{abcde)c4{a,b, c, d, e) mod X 

CQ^—abd/c e,ab /c e) = ^^^{abcde)cQ{a,b,c,d,e) mod X 

where ^7 = a/b^c, ^9 = a? /b^c and .^n = a^b/c^e^. 

See |HK2t Section 3] for a sketch of an alternative proof in the case n = 7. □ 

Corollary 6.5. The forgetful map X{9) — )■ X{3) is given by 
{a:b:c:d)^{d^:a^ + b^ + c^ + Qabc). 
Proof: This follows from Theorem 16. 4( ii) and Remark 16. 2[ □ 



6.3. An alternative projective embedding. We take p > 5 a prime and let 
G = PSL2(Z/pZ) act on X{p) in the usual way. 

Theorem 6.6 (Adler, Ramanan). The group of G -invariant divisor classes on 
X{p) is free of rank 1 generated by a divisor class [A] of degree {p^ — l)/24. 

Proof: See [Ml Theorem 24.1]. □ 

Let m = {p — l)/2. Klein showed there are embeddings X{p) C P™~^ and 
X{p) C P™" with linear G-action. The images are called the 2;-curve and the A- 
curve respectively. The corresponding hyperplane sections are (m — 1)A and mA, 
and indeed the divisor A in Theorem 16.61 is constructed by taking the difference 
of these. It is conjectured that each of these embeddings is via a complete linear 
system (the WYSIWYG Hypothesis in |ARj ) and this is certainly known for p = 7 
andp = 11. The equations for X{p) we have used so far (introduced in Section [2?T1) 
are for the 2;-curve. However in Sections 16.41 and 16.51 below we also need the A- 
curve. 
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Remark 6.7. Let tt : X — )■ X be the universal family over X = X{p). It can be 
shown that 7!'*{^x/x) — 0{pA). Hence the family of curves X — )■ X has Weierstrass 
equation y"^ = — 27c4X — 54c6 where 

CkeH\X{p),0{kpA)) 

for k = 4,6. If we realise X{p) C P*"^^ as the 2;-curve then to write Cj^ as a 
polynomial (in m variables) we need that m — 1 = {p — 3)/2 divides kp. Thus 
in the case p = 7 we were able to write C4 and Cg as polynomials in K[a,b,c\. 
In the case p = 11 we likewise constructed C4 G K[a,b,c,d,e], but there was no 
polynomial cq. 

Case p = 7. The z-curve is the Klein quartic 

X{7) = {x^y + + z^x = 0} C 

The cusps of X{7) are the 24 points of inflection. We recall from [PSS] that the 
cusps are naturally partitioned into eight sets of three {Pi, P2, P3} with 

Pi + 3P2 ~ P2 + 3P3 ~ P3 + 3Pi ~ 

where if ~ 2A is the hyperplane section. We write Tq, . . . ,Tj for the effective 
divisors of degree 3 of the form Pi + P2 + P3 and note that one of these divisors, 
say To, satisfies X{7) r\{xyz = 0} = 4To. We also recall from |PSS] that 2Tj ~ 2Tj 
for all < i, j < 7. It follows by Theorem ESI that 2To ~ 3A. Since 3A ~ 3H-2To 
and C{3H — 2Tq) has basis x'^y, y'^x, z^x, xyz the A-curve is the image of 

X{7) ^ P^ {x : y : z) {ti : t2 : h : U) = {x^y : y'^z : z^x : xyz) 

with equations 

fh U -t2\ 
rank t2 -ta U < 2. 
\t3 U -ti / 
Case p = 11. The 2;-curve is the singular locus of the Hessian of 

[F = v^w + w^x + x^y + y^z + z^v = 0} C P^. 

We write H ~ 4A for the hyperplane section. The cusps are the 60 points of 
intersection of X(ll) with \F = 0}. They are naturally partitioned into twelve 
sets of five {Pi, . . . , P5} with 

Pi + 6P3 + 3P4 + IOP5 ~ H 

and likewise under all cyclic permutations of the Pj. We write Tq, . . . , Tn for the 
effective divisors of degree 5 of the form Pi + . . . + P5 and note that one of these 
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divisors, say Tq, satisfies X{11) fl {vwxyz = 0} = 20Tq. It may be shown that 
5Tj ~ 5Tj for all < i, j < 11 and hence 5Tq ~ 5A by Theorem 16.61 Since 
5A ~ 5H — 15To we find by computing a basis for C{5H — 15To) that the A-curve 
is the image of the morphism X{11) — i- given by 

{ti : t2 : ts : : : tg) = [y'^wxz : vw'^xy : wx^yz : vxy'^z : vwyz^ : vwxyz). 

It is shown in |ARt Theorem 51.1], and we checked using Magma, that this is the 
singular locus of the quartic hypersurface 

tg — (^1^2 + ^2^3 + ^3^4 + ^4^5 + ^5^l)^6 + ^i^3^5 + t^t^ti + 1^1^12 + t\tit^ + t'^t2t4 = 0. 

6.4. Formulae in the case n = 7. 

Theorem 6.8. Let X = = 0} G F"^ be a twist of the Klein quartic, with 
hyperplane section H . Let T = P1 + P2 + P3 where Pi, P2, P3 are points of inflection 
on X with 



Let d G K[x, y, z] be a cubic form with {d = 0} meeting X in a divisor 2D with 
D ~ 2T. Then there is a Gsl{K / K) -module M such that for every field extension 
L/K and rational point P = {x : y : z) E X{L)\{d = 0}, not a point of inflection, 
the elliptic curve 



has 1 -torsion isomorphic to M as a Gal{L/ L) -module. 

Proof: We first note that if di,d2 € K[x,y,z] are cubic forms meeting X in 
divisors 2Di and 2D2 with Di ~ D2 then di/d2 is the square of a rational function 
and hence the elliptic surfaces f l32|) with d = di and d = d2 are isomorphic over K. 
Since X is a twist of the Klein quartic it follows (by taking D = 2Tq as defined 
in the last section) that the elliptic surfaces fl30l) and fl32|) are isomorphic over K. 
(Notice it does not matter whether we write the terms d{x, y, z) in the numerator 
or in the denominator.) We are done by [RSll Proposition 2.1]. □ 

In Theorem 16.101 below we determine rational functions d satisfying the hypoth- 
esis of Theorem 16.81 in the cases X = Xe{7) and X = X^{7). We also show how 
to scale these functions to give the quadratic twist with M = E[7]. 

Remark 6.9. Recall that Xe{7) has a trivial i^-rational point corresponding to 
E itself. Following |RS1] one method for finding the right quadratic twist would 
be to specialise at this point. However this approach fails when d vanishes at the 
trivial point. Neither does the method generalise to X^{7). 



Pi + 3P2 ~ P2 + 3P3 ~ Pa + 3Pi ~ H. 



(32) 



= X^- 27 



Ci{J'){x,y,z) 
d{x,y,zy 



X-54 



Cfi{J'){x,y,z) 
d{x,y,zf 
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Theorem 6.10. Let E/K be an elliptic curve with Weierstrass equation = 
- 27ciX - 54c6 and let A = (c| - c^)/1728. Ifj{E) ^ 0, 1728 then the families 
of elliptic curves parametrised by Ye{7) and Yj^{7) are given by ^3E) with (J^, d) = 
(F,di) and {G,d2) where F and G are the quartics in Theorem \3.6i and 

di(x, y, z) = — 6(3x^ + c^xz — ^c^y'^ + CQyz)z 

d2{x, y, z) = 2A(4x^ + c^x'^z - Uc^xy'^ - 2cQxyz + Sc^y^ + c^y'^z + 200Az^). 

Proof: We fix a symplectic isomorphism : E\l] = fi-j x Z/7Z and let (a : 6 : c) 
be the i^'-point on X{7) corresponding to [E, (p). As in the proof of Theorem 13.61 
we scale (a, b, c) so that 04(0, b, c) = C4 and Cq^o, b, c) = Cg. 

Consideration of the action of SL2(Z/7Z) on both the 2;-curve and the A-curve 
suggests we start with the forms 

si{x, y, z) = (a^c^ - 2ab^c)x^y + (a^6^ - 2abc^)y'^z 

+ {b^c^ - 2a^bc)xz'^ + {a^c^ + + b'^c^)xyz, 

S2{x, y, z) = a^bx^y + b^cy'^z + c^az^x + 2abcxyz. 

We then let vi and r2 be the unique cubic forms satisfying 

(33) ri{x,y, z)xyz = Si{x,y, zY mod {x'^y + y^z + z^x) 

for i = 1,2. The coefficients of ri and r2 are homogeneous polynomials in a,b,c 
of degrees 10 and 6. Recall that in the proof of Theorem 13.61 we put 

F(x, y, z) = 7^F(xx + yiVE x VH) + zHe), 
H 

G(x, y, z) = -^E{xVE + ?/(x x e) + zH^VH). 
The cubics di and ^2 in the statement of the theorem are likewise found by putting 

di{x, y, z) = ^ ri(xx + y{VF x VH) + zHe), 
/o/(\ 2abcH^ 

^ ^ 2H^ 

c?2(x, y, z) = ——r2(xVF + y(x x e) + zH'^VH). 
abc 

It is clear from these constructions that {di = 0} and {^2 = 0} meet the 
corresponding twists of the Klein quartic in divisors of the form specified in The- 
orem 16.81 Hence our formulae for the families of elliptic curves parametrised by 
Ye{7) and Y^{7) are correct up to quadratic twist, say by 5 G . It remains to 
show that 5 is a square. As noted in |HK2l Section 7.1] it suffices to check this in 
the case (p : E[7] = /xy x Z/7Z is defined over K. Then (a : 6 : c) is a i^-rational 
point on X{7). We write (a, 6, c) = (Aao, A60, Acq) with ac&cCo G K. By our 
earlier choice of scaling for a, b, c we have G K. Comparing the Weierstrass 
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equation ( l30l) for E with that in the statement of the theorem we deduce that 
A^ao&oco e (K^'Y. Hence 6^ G and (abcY G (ir^)^. Using dH]) and ([23]) 
we compute 

CkiF)(x,y,z) = (293^)'=/2c,,(xx + y(VF x VH) + zHe) 
Ck{G){x, y, z) = {fd,^H'^ f''^Ck{xWF + |/(x x e) + zH^VH). 



for A; = 4, 6. It follows by ([31D that 



Ck{F){x,y,z) _ Ck{xH^ + yH{VF xVH) + zH^e) 

di{x, y, z)^/2 ^ ((a6c)6ri(xFx + ?/i7(VF x VH) + zH^e))''/^ 

Ck{G){x,y,z) _ Ck{xH'^VF + yH'\^xe) + zH^VH) 

d2{x,y,zY'^ ~ ^ {{ahcfm^r2{xH^VF + yH^{^ x e) + zH-'VH)fl'^ 

for some & . The covariant columns ifx, H{WF x VH), H^e have degrees 
7,14,21 and the contravariant columns H^VF, if^(x x e), H^VH have degrees 
21, 28, 35. Since each column has degree a multiple of 7, its evaluation at (a, 6, c) 
is A'-rational. Thus the families of curves in the statement of the theorem are 
i^'-isomorphic to 

- 27 C(i{x,y,z) 



{{abcyri{x, y, z)Y ((a6c)^ri(a;, y, z)y 



and 



y2 = - 27 



Ci{x,y,z) 



X -54- 



C6{x,y,z) 



{{abcym^r2ix, y, z)y {{abcym^r2ix, y, z)) 



To identify these with fl30|) we note that the cubic forms {abcYsi{x,y, z) and 
{abcYH^S2{x,y, z) have coefficients in K (since the degree of each coefficient is a 
multiple of 7) and then use fl33l) . □ 



Making the change of co-ordinates in Remark 13.71 we can replace di and d2 by 
cubic forms that satisfy the conditions of Theorem 16.81 for Xe{7) = {J-" = 0} C 
and X^{7) = = 0} C where J-" and Q are the quartics in Theorem 11.21 
Moreover having found one such form we can use the Riemann-Roch machinery 
in Magma to find further such forms. 
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In the case of Xe{7) we obtain a cubic form dn with Xe{7) H {du = 0} = 2Di 
for some divisor Di ~ 2T. Then C{3H — Di) has basis 

dii = —2{ax^ + 3bxz + 3y^ + 2ayz)z, 

di2 = 2(ax^ + 3bxz + 3y^ + 2ayz)x, 

di3 = 4(36x^ — 2axy — 2a^xz — 3hyz — 2abz'^)z, 

du = 4(a^x^ + 3bxy + Aahxz + ay"^ + 3lP'z'^)z. 

More generally we compute cubic forms dij for 1 <i,j < 4 such that the matrix 
{dij) is symmetric and each 2x2 minor vanishes mod J^. The remaining dij are 
computed using dudij = dudij (mod J-"). Then Xe{7) fl {dij = 0} = Di + Dj 
where Di, . . . , D4 are divisors all linearly equivalent to 2T. The family of elliptic 
curves parametrised by Ye{7) is now given by fl52]) with {J^,d) = {J^.da) for any 
1 < i < 4. The A-curve is the image of Xe{7) — )■ P^; {x : y : z) ^ {du : . . . : du) 
with equations 

/o t3 -t4 2ati + 14 \ 

rank 2ati + t4 26i(:i + at2 + ats 2at2 + ata < 2. 
yt2 26ti + ata —a^ti + 6^3 — 2ht2 — ht^ — at^ J 

Our formula for the elliptic curve corresponding to P G Ye{7) fails at points 
P with dii{P) = 0. These are the points whose image on the A-curve lies on 
the co-ordinate hyperplane {ti = 0}. Therefore for any given point P we have 
dii{P) 7^ for some i. So unlike the treatment in |HK2l Theorem 5.2], where only 
the cubic form du was given, we have found formulae that cover all cases. 

In the case of Xj^{7) we likewise find cubic forms d'ij for 1 < i, j < 4 such that 
the matrix {d'ij) is symmetric and each 2x2 minor vanishes mod Q. Explicitly 

d\^ = —7ax^y + Qx^z + 3o?y^ — Say'^z + 3yz'^, 

d'22 = 2ax^ + 12hx^y — 2axyz — 3aby^ + Gby'^z, 

c/33 = 2a^xy'^ — lOaxyz + Gxz"^ + baby"^ — 12by'^z, 

= 2a^x'^y — 3ax'^z + habxy'^ — 12bxyz — 3a^y'^z + 8ayz^ — 3z^. 

The remaining d^j are computed using d'^d'ij = d[id[j (mod Q). The family of 
elliptic curves parametrised by Y^{7) is now given by (!32|) with (J^, d) = {Q, Ad'a) 
for any 1 < i < 4. Exactly as before these formulae cover all cases. 

6.5. Formulae in the case n = 11. Our approach is similar to that in the last 
section. As one would expect the formulae in the case n = 11 are more complicated 
than those in the case n = 7. There are however two further complications. One as 
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noted in Remark 16.71 is the absence of a polynomial cq. The other is that the form 
we are looking for is no longer uniquely determined by its image in the co-ordinate 
ring. Indeed in the case n = 7 we were looking for a cubic form, and in the case 
n = 11 we are looking for a quintic form. But in both cases the homogeneous 
ideal is generated by quartics. 

Consideration of the action of SL2(Z/11Z) on both the 2;-curve and the A-curve 
suggests we start with the forms 

, w, X, y, z) = (a^6c^ + fo^cd^ — ali^c^de — 2h(?de^)v^wxz 

+ {Ir'cd^ + c^de^ - abc^d'^e - 2a^cd^e)vw'^xy 

+ {c^de^ + a^d'^e — ahcd^e^ — 2ab^de'^)wx^yz 

+ {o?d^e + ah'^e^ - a^bcde^ - 2a^bc^e)vxy^z 

+ {ab^e^ + a%c^ - a^b'^cde - 2ab'^cd^)vwyz^ 

+ 2(a^6^c^e + a%'^de^ + a^cd^e^ + ab'^c^d^ + bc^d^e^)vwxyz, 

S2(f , w, X, y, z) = a^bcev'^wxz + ab'^cdvw^xy + b(?dewx^yz + acd^evxy'^z 

+ abde^vwyz^ + 2abcdevwxyz. 

We then solve for ri and r2 satisfying 

(35) ri{v,w, x,y, z){vwxyz)^ = Si{v,w, x,y, z)'^ (modX,X') 

where X and X' are the homogeneous ideals for X{11) C P'* with respect to the 
two sets of variables a, b, c, d, e and v, w, x, y, z. The coefficients of ri and r2 are 
homogeneous polynomials of degrees 28 and 20 in a, b, c, d, e. It is important to 
note that ri and r2 are not uniquely determined by (!35l) . However by averaging 
over the group we were able to choose = {abcdeYvi in such a way that the 
coefficients of 

ri(t>Xi + ti)X4 + XXs + yxg + -2X14) 

and 

r2{vVF + wVIj + xVIs + I/V/9 + zVc^) 

are congruent mod X to certain polynomials in F and C4. The result is a pair of 
quintic forms di{v,w,x,y, z) and d2{v,w,x,y, z) with coefficients in Q[F, C4]. We 
then put 

di{v, w, X, y, z) = di(Fv, w, F'^x, F'^y, F'^z) 
d2{v, w, X, y, z) = ■^d2{F^v, F^w, F'^x, y, F^z) 
and replace F^^ by A so that di and d2 have coefficients in Q[c4, A]. 
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Remark 6.11. Unfortunately the polynomials and di would take several pages 
to print out, so we must refer the reader to the accompanying Magma file |F4] for 
further details. We should also remark that the computation of di and d2 took 
several hours of computer time (whereas no other calculation up to this point took 
more than a few seconds). 

Theorem 6.12. Let E/K be an elliptic curve with Weierstrass equation = 
- 27c4X - 54c6 and let A = (c^ - c^)/1728. Assume j{E) ^ 0, 1728 and let 
X = Xe{1^), respectively X^(ll), be as given in Theorem \3.11\ If {v : w : x : 
y : z) & X{K) \ {di = 0}, not a cusp, then the corresponding elliptic curve E'/K 
satisfies 

Ci{E') = di(v, w, X, y, z) C4(F)(f , w,x,y, z) mod {K^Y^ 

respectively 

Ci{E') = d2{v, w, X, y, z) C4(G)(f , x, y, z) mod {K^Y. 

Proof: As noted in |HK2t Section 7.1] we are free to extend our field K so 
that : -^[11] = /ill X Z/llZ is defined over K. Let {a : h : c : d : e) he the 
corresponding K-point on X(ll). We scale a, 6, c, e so that 04(0, 6, c, d, e) = C4. 
Then a}^, . . . , e^^ G K and by comparing the Weierstrass equation for E in the 
statement of the theorem with ( 1311) we deduce {ahcdeY^ G {K^Y. The polynomials 
F and G were computed in Section 13.31 as twists of F. Putting 

{v\ w', x', y', z'f = vF'^^i + wF^^i + xF^^xg + yF^xg + ;zF^°xi4, 

(w", w", x", y", z"f = vF^VF + wF^VIj + xF^Vh + yFVIg + zF^Vc^, 

it follows by (HHD, (Hn]) and (EH) that 

C4{F){v,w,x,y,z) = — — ^^^2^ ^ Ci{v',w',x',y',z'), 

ir^\i \ (55(c4 — 1728^"*^^))® , II II II II II, 
C4{G){v,w,x,y,z) = — C4(f ,w ,x ,y ,z ). 

By construction of di and d2 we have 

di{v, w, X, y, z) = (^^^^g)3^30 ^i(^^ ^')' 

d^iv, w, X, y, z) = (^^^2)3^9 "''^^''' 
In view of Theorem 16.41 our aim is to show that 

di{v,w,x,y, z) C4^(F){v,w, x,y, z) = v'w'x'y' z'c4{v' ,w' ,x' ,y' , z') mod {K^Y, 
d2{v,w,x,y,z)c4^{G){v,w,x,y,z) = v"w"x"y" z"c4^{v" ,w" ,x" ,y" , z") mod {K^Y, 
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equivalently 

{abcde)^F^^ri{v', w', x' , y', z') = v'w'x'y'z' mod 
(abcdeYF^^r^iv", w", x", y", z") = v"w"x"y"z" mod (iT^ )^ 

To finish the proof we note that the quintic forms 

{abcdeY si{v' , w', x' , y', z) and {ahcdeY F^ S2{v" , w", x" , y" , z") 

have coefficients in K (since the degree of each coefficient is a multiple of 11) and 
then use ([35]). □ 

We already gave a formula for the j-invariant in Section 16.11 So (assuming 
j{E') 7^ 0) Theorem 16.121 determines E' up to quadratic twist by —1. In the case 
= Q it is easy to decide which of the remaining two possibilities is correct by 
looking at traces of Frobenius. 

In principle it should be possible to find alternative quintic forms to be used at 
points where di or ^2 vanishes. (The quintic forms in question are those meeting 
the 2;-curve in a divisor AD where D is a hyperplane section for the A-curve.) In 
the case n = 7 we managed to find the alternative forms using the Riemann-Roch 
machinery in Magma. Unfortunately the analogue of this in the case n = 11 does 
not appear to be practical. In the case of X^{11) this is not a problem, since 
the 25 points with d2 = correspond to the elliptic curves ^-isogenous to E for 
i = 2,7, 13. We can also account for 7 of the points on Xe{^^) with di = as 
corresponding to the elliptic curve E itself and the elliptic curves 5-isogenous to 
E. We are yet to encounter an example (over K = Q) where one of the remaining 
points with rfi = is rational. 



7. Examples 

We use the formulae in Theorems 11.21 [T73] and [L^ to give examples of non-trivial 
n-congruences for n = 7,9, 11 over Q and Q(T). By "non-trivial" we mean that 
the elliptic curves are not isogenous. The examples over Q illustrate the value of 
minimising and reducing as described in Section [5l The examples over Q(T) were 
found by setting a = b = — 27j'/(4(j — 1728)) to obtain a surface fibred over the 
j-line and then intersecting with one of the co-ordinate hyperplanes in the hope 
of finding a rational curve. We refer to elliptic curves over Q by their labels in 
Cremona's tables [C] . For elliptic curves beyond the range of Cremona's tables we 
simply write the conductor followed by a *. 
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7.1. Examples in the case n = 7. 

Example 7.1. Let E be the elliptic curve 162cl. Let J-" and Q be the equations 
for Xe{7) and X^{7) as given in Theorem 11.21 with a = 3645 and b = —13122. 
These have invariants = -2^^ ■ 3^*^ and \E'(^) = 2^^ • 3^*^. Minimising and 

reducing suggests that we substitute 

Fix, y, z) = ^A_^(36y - ^z, 1944x - 972y - 1215^;, z) 

G{x. y, = ^T^^^^llSa; + I8y + 9z, z, -486x + 1458y + 1944^) 

to give quartics 

F{x, y, z) = Sx'^z + 3x^y^ — Qx^yz + 'ix'^z^ — 3xy^ 

+ 3xz^ + 2y^ - y^z - 9y^z^ + 4yz^ - 5^^ 

G{x, y, z) = —x^y — x^z — Qx^z^ + 6xy^z — 6xyz^ 

+ 6xz^ + 2y^ + 2y^z - 6yh^ - 38yz^ - 8z^ 

with invariants "^{F) = —2 ■ 3'* and ^(G) = 2^ ■ 3*^. We find rational points 
Pi = (1 : : 0), P2 = (3 : -2 : -1) on {F = 0} C P^, and rational points 
P3 = (1 : : 0), P4 = (1 : 1 : -1), P5 = (4 : -1 : 1) on {G = 0} C P^. The 
corresponding elliptic curves 7-congruent to E are 



Pi 


162cl 


y' 


+ xy = 


x' 


-x' 


+ 3x-l 




P2 


293706* 


y' 


+ xy = 


x^ 


-x' 


- 62930562a; 


- 192134303740 


P3 


162c2 


y' 


+ xy = 


x^ 


-x' 


- 42x - 100 




P4 


17334/1 


y' 


+ xy = 


x^ 


-x' 


- 5473977s - 


- 4956193171 




624186* 


y' 


+ xy = 


x^ 


-x' 


- 117514022^ 


I2x + 360746315347508 



The fact 162cl and 162c2 are reverse 7-congruent is already clear since they are 
3-isogenous and (3/7) = —1. 

It is shown in |HK2] that there are infinitely many 6-tuples of directly 7- 
congruent non-isogenous elliptic curves over Q. The following example shows 
that there are infinitely many pairs of reverse 7-congruent non-isogenous elliptic 
curves over Q. 

Example 7.2. Let E/Q{T) be the elliptic curve y"^ = x^ + ax + b where a = 
b = -27j7(4(j - 1728)) and j = 27T^{5T - 56) /{T - 1). Then on X^(7), with 
equation as given in Theorem II. 2[ we find the rational point 

{x:y:z) = {0: -A{T'^ - 12T + 8){hT^ + 4T + 8) : 9T'^{T + 4)(5T - 56)). 
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Specialising T (and taking quadratic twists by d as indicated) we obtain the fol- 
lowing pairs of reverse 7-congruent elliptic curves Ei and £'2- 

T d El E2 



-16 -38 361al 361a2 

8 -10 700^1 2100gl 

2 -2 211661 10580/il 

16/5 -42 24255rl 24255m2 

The existence of specialisations Ei and E2 that are not isogenous is enough to 
show that there are infinitely many such specialisations. 

7.2. Examples in the case n = 9. 

Example 7.3. Let E be the elliptic curve 477752:1. Let J-*! = ^-"2 = be the 
equations for Xe{9) C P'^ as given in Theorem 11.31 with a = —41489280 and 
b = 102867483600. The invariant is ^(J^i, J'2) = -2^2.360.512. 732. ^34^ Minimising 
and reducing suggests that we substitute 







y 




z 




v) 





(x\ 

y 

z 

VV 



79644600 -185343480 -3827880 

-22932 47040 6468 

\ -6 13 1 

so that Xe{9) is defined by 

-x'^z + x^t + Axyz + 2xyt - "ixz^ + Ixzt - "ixt^ + 6y^ + X^y^z 

+ yH + ^yz^ - Ayzt + 9yt^ - Qz^ + 27z^t - l?,zt^ - = 

-3x'^y + Ax'^z + 3x'^t + 3xy^ + 20xyz - 12xyt - 3xz'^ - 32x zt + 25xt'^ + 21y^ 

+lQy^z - 2AyH - I2yz^ + lOOyzt + Myt^ + 39z^ - 2lz'^t - hQzt^ - llt^ = 

with invariant —3'^ ■ 5^ ■ 7^ ■ 13'^. We find rational points Pi = (1 : : : 0), 
P2 = (4 : — 1 : — 1 : 0) and P3 = (1 : 2 : —1 : 0). The corresponding elliptic curves 
directly 9-congruent to E are 

Pi 47775^1 + ?/ = -x^ -32013a; + 2215478 

P2 429975* y'^ + y = x^ - 314688780X - 2148671872069 

P3 494901225* y'^ + y = - 23634650164230x - 21037908383222056594 

Since X^(9) is not locally soluble at p = 7 there are no elliptic curves reverse 
9-congruent to E. 
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In addition to Example 17.31 we have found two further triples of directly 9- 
congruent non-isogenous elliptic curves over Q. These are 

4650jl y"^ + xy = x^ + x'^ - 2700a; + 54000 

553350* y'^ + xy = x^ + x'^ - 10472207700x - 455228489646000 

1966950* y"^ + xy = x^ -x'^ - 20654522386242x - 36130051534030639084 



27606cl y'^ + xy = x^ - 10289707x + 12703497719 
358878* y'^ + xy = x^ + 2940333x - 1416695391 
1242270* y"^ + xy + y = x^ -x'^ - 3599122; - 322105301 

The elliptic curves 1701al, 1701(^1 and 22113cl are also 9-congruent but only the 
last two of these are directly 9-congruent. 

Example 7.4. Let E be the elliptic curve 201cl. Let = ^2 = be the equations 
for X^(9) C P3 as given in Theorem O with a = -1029699 and b = 402173694. 
The invariant is ^'(^i, Q2) = 2^* • 3^^ ■ 67^. Minimising and reducing suggests that 
we substitute 



-45147 
90294 
77 



y 

z 



\ 



23136696 


20106774 


-20376135\ 






-39828 


33990 


-34509 




y 


79332 


-68304 


69342 




z 


68 


-58 


59 J 




W 



Q o o o o o 

—X + 4:X y + 3x z — X t + 6xy + 2xyz — 2xyt — 6xz + Axzt 



so that Xg(9) is defined by 
4x^?/ -|- ?)X^z — J 

-llxt^ +y^ + 7yH - 2yz^ + Ayzt - Ayt^ + Qz^ - 7zH + Azf + = 
2x — X y + 5x t — lOxy — 2xyz + IQxyt — 3xz + Axzt + 8xt 

-5y^ - y^z - 3yH - yz^ - 2yzt + I2yt^ + 3z^ - AzH + 2zt^ - 3t^ = 

with invariant —3^ ■ 67^. On this curve we find the rational point (1 : —2 : — 1 : 0). 
The corresponding elliptic curve reverse 9-congruent to E is 



374865* 



y"^ + xy = x^ + x^ - 60068738107X + 4858035498982726 



The following example shows that there are infinitely many pairs of directly 
9-congruent non-isogenous elliptic curves over Q. 
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Example 7.5. Let E/Q(T) be the elliptic curve y'^ = + a{T)x + b{T) where 

a(T) = |(39r^ - eOT^ - 162T^ + GOT + 39), 

6(T) = 47T^ + 120T^ + 21T^ + 21T^ - 120T + 47. 

Then on Xe{9), with equations as given in Theorem II. 3 [ we find the rational point 

{x:y:z:t) = (f (3T^ + 8T^ - 2T^ - 8T + 3) : T"^ + I : 1 : 0). 

The corresponding curve directly 9-congruent to E is the curve directly 3-congruent 
to E constructed in Theorem 11.11 with C4 = — a(T)/27, ce = — 6(T)/54 and 

(A : /i) = (47T6 - 78T^ - ISST^ + 244r3 + ISST^ - 78r - 47 

: I8(r2 + i)(r2 + 6r-i)). 

Specialising to T = gives a pair of curves with conductors 80640 and 5886720. 
In particular these curves are not isogenous. 

Next we give an example to show there are infinitely many non-trivial pairs of 
reverse 9-congruent elliptic curves over Q. 

Example 7.6. Let E/Q(T) be the elliptic curve = + a{T)x + b(T) where 
a(T) = 3(3r + l)(6r^ - 3r - 1)(9T3 - 9T - 4)^ 
b{T) = 2(3r^ + 27T^ + 21T + 4)(6r^ - 3r - 1)\9T'^ - 9T - 4)1 

Then X^(9), with equations as given in Theorem 11.31 has rational point 

{x:y:z:t) = {-{6T^ - 3T - 1){9T^ - 9T - 4) : T : 1 : 0). 

The corresponding curve reverse 9-congruent to E is the curve reverse 3-congruent 
to E constructed in Theorem 11.11 with C4 = — a(T)/27, ce = — 6(T)/54 and 

(A : /u) = ((ST + 1){9T^ - 9T - 4){6T^ - ST - l)(180r'^ + 321T^ + 216T2 + 66T + 8) 

: 3(369T'' + 1107T^ + 1431T^ + 1017T^ + AUT^ + 90r + 8)) . 

Specialising T (and taking quadratic twists by d as indicated) we obtain the fol- 
lowing pairs of reverse 9-congruent elliptic curves Ei and £'2- 



T 


d 


El 


E2 


-1 


6 


24a4 


24a5 


-1/3 


6 


243al 


24362 


-1/4 


3 


768c/l 


114432ol 


-1/2 


-6 


6400m1 


6400m2 


-2/3 


6 


23814t;l 


23814^1 
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7.3. Examples in the case n = 11. 

Example 7.7. Let E be the elliptic curve 1782bl. Let J-" be the cubic form 
describing Xe{11) C as given in Theorem 11.41 with a = 765 and b = 15102. 
The invariant is ^E'(J^) = —2^^ ■ 3^^ ■ 11^. Minimising and reducing suggests that 
we substitute 







/ 


984 


12900 


-9093 


-34056 


13689 ^ 


(v\ 


w 






-2040 


-24252 


-3315 





-16857 


w 


X 






328 


164 


-435 





-57 


X 


y 






-352 


88 


-264 


264 


-1056 


y 


v) 




V 


-8 


-4 


-13 





25 y 





so that Xe{H) C P'' is the singular locus of the Hessian of 

o 

—V w + vx — vy + 2vz — vw + Avwz — Avx — Svxy + 2vxz + Qvyz 



+?)VZ +2w — ?)W X — 2w y + z + Qwx + 2wxy + 2wxz + Qwy — 6wyz 

+9wz'^ — — x'^z — Sxy"^ — 6xyz — 9xz'^ — 6y^ + 9y'^z + 3yz'^ — Tz"^ = 

with invariant 2^ ■ 3^ ■ 11^. We find rational points Pi = (—1 : 5 : 1 : 2 : 1), 
P2 = (0 : : : 1 : 0) and P3 = (1:1:— 1:0: —4). The corresponding elliptic 
curves directly 11-congruent to E are 



Pi 


178261 


y' 


+ xy = 


x^ 


-x^ 


+ 48,T + 224 


P2 


178262 


y' 


+ xy = 


x' 


-x' 


- 447a; - 7795 


P3 


447282* 




+ xy = 


x^ 


-x^ 


- 17552171922X - 22795357517867 



The fact 178261 and 178262 are directly 11-congruent is already clear since they 
are 3-isogenous and (3/11) = 1. 

Example 7.8. Let E be the elliptic curve 4466cl. Let Q be the cubic form 
describing X^(ll) C P^ as given in Theorem 11.41 with a = 85 and 6 = —83162. 
The invariant is "^{J^) = 2^^ ■ 7 ■ 11^ ■ 29^. Minimising and reducing suggests that 
we substitute 



(A 


/4096 


-1408 


128 


-1312 


45088^ 




w 





128 


128 


32 


110 


w 


X 








-256 


-96 


-103 


X 


y 











-32 


-11 


y 




V 











-1 J 


v) 
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SO that X^(ll) C is the singular locus of the Hessian of 



-2v^z — 4:vwy + 12vxy + Avxz + 5vy'^ + 6vyz 



„3 



w'^x + w'^y 



(1 O Q O O 

—Awxy — 2wxz — 3wy + 196wyz + 83wz — llx — 12x y — 9x z 

-llxy'^ + 366xyz + I2bxz^ + 322y^ + Uly'^z + 27byz^ + 632^^ 







with invariant -2^ ■ 7 ■ 11^ ■ 29^. We find rational points Pi = (-7 : 11 : 3 : 1 : 1) 
and P2 = (7830 : —3553 : 510 : —281 : 71). The corresponding elliptic curves 
reverse 11-congruent to E are 



^2 



1755x - 27349 



x' + 117885809240X+ 16240157710556505 



Pi 4466c2 y^ + xy + y 

P2 1 174558* y'^ + xy + y = x^ 

The fact 4466cl and 4466c2 are reverse 11-congruent is already clear since they 
are 2-isogenous and (2/11) = —1. 

We did not find any triples of 11-congruent non-isogenous elliptic curves over Q. 
The following example shows that there are infinitely many pairs of directly 11- 
congruent non-isogenous elliptic curves over Q. 

Example 7.9. Let E/Q{T) be the elliptic curve y'^ = x^ + a{T)x + 6(T) where 
a(T) = -3(T - 3)(T^ - 5T^ - 24T - 92)/(T^ - + 4T + 24) 
b{T) = -2{T - 3)(r^ - - IIT^ - A^T"^ - 62T - 316)/(T3 _ + 4r + 24). 
Then X£;(ll), with equations as given in Theorem 11.41 has rational point 
I rp6^rp5 ^ 3X2-4 ^ 259T3 + 520T2 + 676T + 1248 ^ 
-(T - 3)(T5 + AT^ + 43T3 + lOOT^ - 44T - 320) 
-(T^ + 3T + 14)(T3 _ t2 + 4T + 24) 


(T + 4)(T=^-r2 + 4r + 24) J 

Specialising T (and taking quadratic twists by d as indicated) we obtain the fol- 
lowing pairs of directly 11-congruent elliptic curves Ei and E2. 







w 




X 




y 




v) 





\ 



T 


d 


E, 


E2 


2 


-6 


lla3 


lla2 


1 


42 


49al 


49a4 


-3 


-2 


21661 


1512cl 



11 -426 10082cl 70574/il 
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The elliptic curve 11-congruent to E is = + A{T)x + B{T) where 

A{T) = -3(r - 3)(r2 - ST - 17) (T^ - + 4r + 24)(r^2 - 250r" + 3473r^° 

- 23824r9 + 106654r^ - 354556r'^ + 890186r^ - 1710568r^ 

+ 2386357r'^ - 2054170r3 + 179978ir2 + 956680r + 3570796), 
B{T) = -2(T - 3){T^ - + 4T + 2'if{T'^° + 476T^^ - 27815T^^ + 556718T^^ 

- 6046664r^^ + 42450848T^^ - 213832636r^'' + 823702888r^^ 

- 2497998850T^2 + 5954643736T^^ - 10798748818r^° + 13644339892r^ 

- 7927895108r^ - 10398245632r'^ + 25581636532r^ - 10366268760r^ 

- 60876061719r'^ + 164062110060r3 - 98120800447r2 + 262948421518T 
+ 141270230564). 

These elliptic curves have discriminants 

2^236(2^ - 5)(T - 3)2(r + lf{T'^ + 7)/{T^ -T'^ + 4T + 24)^ 
-2^'^3^{T - 5)'^(r - 3f{T + lf{T^ + 7){T^ -T'^ + AT + 2Af{T^ - + 15r - 31)^^ 

We did not find any pairs of reverse 11-congruent non-isogenous elliptic curves 
over Q(T). We note that according to |KS[ Theorem 4] the modular diagonal 
surface in this case is of general type. 

7.4. Tables. We have written a program in Magma that given an elliptic curve 
E'/Q and n G {7,9,11} searches for elliptic curves n-congruent to E. For n G 
{9, 11} we have run these programs for all elliptic curves in the Cremona database 
(up to conductor 130000 at the time of our calculation). The resulting list of pairs 
of n-congruent elliptic curves is available from the author's website |F4] . We have 
been careful to remove all pairs that could be deduced from earlier entries by any 
combination of the following observations. 

• n-congruence of elliptic curves is an equivalence relation. 

• If is a rational isogeny of degree coprime to n then E and E' 
are n-congruent. 

• If and E' are n-congruent then so are their twists by the same quadratic 
character. 

There is no guarantee that our tables are complete, since we have only searched 
for points of small height on the corresponding curves of genus 10 and 26. However 
the points we found (on minimised and reduced models) were generally much 
smaller than the search bound used. So in any given case it seems likely that we 
have found all the rational points, but there is little prospect of proving this for 
curves of such large genus. 
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Table 1 : Pairs of 9-congruent elliptic curves 



17a^ 




493a 


4306 




202106 


968a 




132616* 


1950/1 




122850/ 


33a^ 




297c 


434c2 


+ 


62062/1 


1050j2 




115506g2 


1950m2 


+ 


175506a2 


35a2 




7762 


4466 




150302* 


1066a 




7462e 


1952c 


-(- 


44896e 


35o3 




101561 


456c 




20520f> 


1106c 


-1- 


2281678* 


1 963o 


-1- 


374933* 


66ol^ 


-|- 


3102cl 


459cl 




2295al 


1110n2 




13098g2 


1998c/ 




3774c 


84a3^ 




193262 


5066 




25306 


1111a 


+ 


121215655* 


2040/1 


+ 


4073880* 


91a 




5005c 


525c2 


+ 


4725r 


1134(il 


+ 


5670/il 


2072c2 




184408* 


106d 


-(- 


2438a 


5376 


+ 


148749* 


1155jl 




47355sl 


2093c 




2576483* 


110c2 


+ 


60610m2 


570fc3^ 




1254j2 


1176a 




10584n 


211861 




7660806* 


115a 


4- 


366505* 


573c 




21491511* 


11766 




341046 


2135c/ 




207095* 


118c 


-L 


27494c 


600c^ 


-i- 


5400r- 


1190c2 




393890* 


21906 




116070? 


1236 




3813a 


606 


+ 


155742* 


1209a 


+ 


1357707* 


2190e 


+ 


15330A; 


131a 




136633* 


62762 


-|- 


5643d2 


12156 




1215g 


2190/ 


-|- 


24090fe 


140a2 




3220c2 


6486 


+ 


26568o 


1215c 


+ 


230856 


219861 


+ 


964922* 


142c2 




232454* 


696a 




355656* 


1218/i^ 




1218i 


2209a 




110456 


153a 




117351a 


702/ 




30186/1 


1275d 


-)- 


263925* 


2211c 


-)- 


134871* 


162al 


+ 


SlOcl 


710a 




137030* 


1281(i 


+ 


4209c 


23146 




363298* 


166a 




848426* 


714c 


+ 


6426n 


1288e 




240856* 


2373/ 




21357c 


174al 




17574/1 


7156 


-(- 


1080365* 


1330c/l 




860510* 


2418a 


-|- 


2884674* 


174c 




1914g 


7416 


4- 


3335241* 


1470e2 




4998j2 


2443c 




925897* 


195c 


+ 


1755a 


741(i 


+ 


65949e 


1470n^ 




13230d?; 


2450/^^ 


+ 


129850r 


2006-^ 




20600?) 


7686^'^ 


-(- 


1 14432 j 


1482el 




16302il 


24516-^ 


-|- 


2451c 


201a 


-|- 


82209a 


781a 




13496 


1482e2 


-(- 


117078p2 


2530e 


-(- 


908270* 


201c 




374865* 


8056^ 


-l- 


10465a 


1482/2 


-|- 


8128770* 


25376 


-|- 


210571* 


229a 


-(- 


2357555* 


805c^ 




249556 


1518r 


-|- 


13662m 


2541a 




22869o 


2356 


+ 


329a 


808a 


+ 


891224* 


16176 


+ 


289443* 


2568e 


+ 


7408680* 


238(fi 




911546 


810a2 




208170* 


1653a 




520695* 


2571a 


-|_ 


1 2749589* 


243al 




24362 


810d2 


+ 


23490n2 


1701a 




1701o 


2616c 


+ 


6574008* 


246c^ 


-|- 


2214a 


843a 




1600857* 


1701a 




22113c 


2646al 


-|- 


60858/il 


249a 


+ 


42579e 


850c 


+ 


16150g 


1725i^ 




343275* 


2646el 


+ 


13230el 


258c 


+ 


1290/1 


858d2 


+ 


4290/2 


1757a 


+ 


335587* 


2674e 


+ 


259378* 


270al 


+ 


2970il 


8616 


+ 


192003* 


1771cl 


+ 


2807035* 


2678a 




20806a 


302fe2 


+ 


226802* 


861d 


+ 


469245* 


1782c 


+ 


290466* 


26996 


+ 


5249555* 


338a^ 


+ 


22646d 


8676^ 


+ 


141321* 


1806a 


+ 


2775822* 


2706^2 


+ 


65855922* 


35062 




66506/i2 


897(f 


+ 


8073a 


1830/1 


+ 


16470W 


2728c/ 


+ 


832040* 


354a2 


+ 


55578e 


9066 


+ 


610222710* 


1848g 


+ 


9097704* 


27586 


+ 


1069527578* 


364a 


+ 


26572d 


906e 


+ 


28086c/ 


1862a2 


+ 


102410n2 


2787d 


+ 


393187173* 


390ci32 


+ 


3510/2 


930<f 


+ 


564510* 


1870e 


+ 


136510* 


27936 


+ 


790419* 


40662 




62930fe2 


930i2 


+ 


160890* 


18876 




1054833* 


2835al 


+ 


65205fll 


430a 


+ 


7310e 


930; 


+ 


8370n 


1911a 




171990 


2835c/ 


+ 


53865d 
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Table 2 


: Pairs of 11- 


13862.3 


+ 


175266 


3910/ 


+ 430100 


1906 


+ 


2470a 


3990z 


+ 39906a 


2166 


+ 


1512c 


4046n 


+ 416738* 


2386^ 


+ 


45226 


4158/ 


+ 54054m 


2586^ 




461562* 


4200^2 


+ 79800/1 


294a^ 


+ 


49986a 


4275a2 


- 175275* 


325a3 


+ 


23075e 


4466c2 


- 1174558* 


329a 


+ 


59549a 


45986 


+ 32I863 


4266^ 


+ 


77106c 


4704a 


- 192864* 


497a 


+ 


148603* 


47606 


+ 775880* 


513a 




77463a 


5070(i 


- 55770j 


6006 


+ 


4200c 


52656 


+ 194805* 


645/ 




70305fl 


54546 


+ 59994e 


6486 




4536c 


55776 


- 390396 


TOOe^ 




11900d 


58806 


- 417480* 


1080d 


+ 


39960/1 


6710/1 


+ 4381630* 


1115a 


+ 


125995a 


7315e 


+ 8214745* 


11346 




12474/ 


7350n 


+ 95550c/i 


11556 




427350 


7830/^ 


+ 477630* 


1176a 




15288a 


8096a 


- 13984a 


1210(i 


+ 


1210/ 


8120d 


+ 332920* 


12546 




264594* 


8410c 


- 58870e 


1470i 




161706/ 


8670o 


- 8670p 


I6660 


+ 


183266 


9438d 


+ 1009866* 


17826^ 


+ 


447282* 


9450/ 


+ 9450m 


1848/ 


+ 


97944/1 


945O0 


+ 292950* 


1870c 


+ 


24310c 


945O60 


+ 160650* 


19253 


+ 


140525* 


9555a 


- 181545* 


20936 


+ 


26611(i 


9966/1 


+ 827178* 


2184c 


+ 


2184d 


lOOlOt 


+ 670670* 


27556 










3234e 


+ 


947562* 


1177 Aa 


+ 24172022* 


3322c 


+ 


235862* 


12376i 


+ 12376/c 


3325a 


+ 


1173725* 


126966 


+ 12696c 


3610d 


+ 


25270j 


136506a 


+ 2716350* 


3718d 


+ 


1078226 


14196i 


- 269724* 


3822w 




42042ce 


14844a 


+ 40182708* 


3850a 


+ 


654506 


149106a 


+ 40450830* 


38501^ 


+ 


65450i 


14950/ 


+ 1599650* 


3900e 




66300* 


16150p 


+ 4731950* 



congruent elliptic curves 



16354/1 


+ 


703222* 


55470m2 


+ 


1275810* 


16390m 


+ 


23585210* 


55594a 




10062514* 


17550a 


+ 


298350* 


56100^2 




15539700* 


17550^ 


+ 


122850r 


56154* 




27346998* 


17556c/ 


+ 


9778692* 


57354j 


+ 


3498594* 


17710/1 


+ 


726110* 


58968fe 


+ 


58968/ 


18850i 


+ 


131950* 


600886 


+ 


53658584* 


199506/ 


+ 


618450* 


645966 


+ 


53162508* 


20838/ 




10273134* 


65220c 


+ 


534086580* 


211756 


+ 


21175fl 


66300g 


+ 


1259700* 


21760a 


+ 


805120* 


66930e 


+ 


101265090* 


229506i 


+ 


849150* 


67158c 


+ 


3559374* 


23595g 




165165* 


67650i; 


+ 


16168350* 


24906a 


+ 


70558698* 


7089011; 


+ 


2197590* 


25110J 




426870* 


716106j 


+ 


109634910* 


26026c/ 




2836834* 


732556 




89151335* 


27610/2 


+ 


5273510* 


73326* 


+ 


3886278* 


27650i 


+ 


1023050* 


73370/1 


+ 


130790* 


27885p 




2704845* 


78650tt;2 




786506c 


28420c/ 


+ 


5087180* 


79800s 


+ 


16837800* 


28830a 




2219910* 


80325U 


+ 


80325?; 


28840c 


+ 


30253160* 


81675g 


+ 


3348675* 


30774/1 


+ 


11417154* 


83148g 




582036* 


30855a 


+ 


215985* 


84270i 


+ 


589890* 


30888g 


+ 


216216* 


84930m 


+ 


59196210* 


31746(j 


+ 


222222* 


84930p 


+ 


31509030* 


32802^2 




117660774* 


850506/ 


+ 


2466450* 


32856/ 


+ 


229992* 


87210/ 


+ 


3226770* 


34385a 


+ 


378235* 


87990d 


+ 


5895330* 


355746 




35574e 


88842/ 




120198fc 


36498s 


+ 


56406j 


90986e 


+ 


423175886* 


37446i 




4456074* 


92950s 


+ 


9016150* 


37830O 


+ 


31285410* 


93795r 


+ 


2157285* 


38070fc 




5291730* 


95370c/i 


+ 


667590*2 


39732a 


+ 


24514644* 


95550c6 


+ 


95550CC 


457386 


+ 


869022* 


957006 


+ 


2201100* 


47974c/2 




48885506* 


98070^ 


+ 


270771270* 


53290a2 


+ 


532906 


98982c 




19697418* 


53865e 




10395945* 


104910c/ 


+ 


3252210* 


54813a 




1589577* 


1055226 


+ 


139183518* 
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The entries are given as Ei±E2 where the ± indicates whether the n-congruence 
respects the Weil pairing. In all cases except when n = 9 and the curves admit a 
rational 3-isogeny we have omitted the final number from the Cremona reference 
(which may be taken to be 1). A superscript i indicates an elliptic curve that 
admits a rational £-isogeny where £ is a prime not dividing n. If i is not a square 
mod n then we may change the sign of the congruence by passing to an isogenous 
curve. For elliptic curves beyond the range of Cremona's tables we have again 
written the conductor followed by a *. The extended version of our tables |F4j 
also gives the Weierstrass equations. 
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